Questions tagged [ios]

iOS is Apple's operating system for the iPhone, iPad and iPod Touch.

iOS is Apple's operating system for the iPhone, iPad and iPod Touch. Questions in this tag should be about:

  • risks in deploying iOS devices and potential countermeasures
  • security features available for iOS app developers
  • secure development of iOS apps

Not to be confused with IOS, the operating system found in Cisco's network hardware.

512 questions
167
votes
6 answers

Apple's open letter - they can't or won't backdoor iOS?

Apple released an open letter to the public outlining their reasons for not complying with the FBI's demands to modify the iPhone's security mechanism. Here's a summary: The FBI has an iPhone in their possession which they would like to access data…
TTT
  • 9,242
  • 4
  • 23
  • 32
66
votes
5 answers

Why is iPhone's internal storage so hard to crack/decrypt?

I’ve heard about a rule in Information Security, that once a hacker has access to your physical machine, then it’s all over. However, there seems to be a big exception to this rule: iPhones. It was all over the news a while back that the CIA (or the…
Melkor
  • 1,295
  • 2
  • 11
  • 13
64
votes
4 answers

Why do mobile devices force user to type password after reboot?

Nowadays, many mobile phones have supported unlocking through fingerprint recognition. However, both iOS and Android require users to enter the password after the device is rebooted, even though an authorized fingerprint is given. My question is:…
nalzok
  • 779
  • 1
  • 6
  • 11
35
votes
4 answers

How do I verify HTTPS connections in Mobile apps?

There are a lot of mobile apps nowadays with payment gateways support. However, unlike desktop browsers, these mobile apps do not show us an 'Address bar' by which we can identify a HTTPS connection. How can I make sure I am making a payment on a…
Adarsh Konchady
  • 453
  • 1
  • 4
  • 5
31
votes
5 answers

How do location-based apps avoid getting cheated by emulated GPS?

Some apps like Foursquare require the user to "check in" at physical places, in order to gain money benefits. Given that emulated GPS are available for customized versions of Android, it sounds easy to trick such apps. Given the monetary incentives,…
Nicolas Raoul
  • 1,276
  • 2
  • 12
  • 17
29
votes
2 answers

Why do web sites show my iPhone using different IP addresses for HTTP and HTTPS (cellular only)?

While testing a recent adtech integration I noticed something I can't explain. The iPhone uses two IP addresses. Seemingly one for HTTP and one for HTTPS. To further confuse things it only happens when the device is not on wifi. Although, the only…
Greg Dean
  • 392
  • 3
  • 7
28
votes
1 answer

iOS Encryption Details

Following on from this question , what resources are available relating to the technical specifics of how apple implement encryption on their iOS 4.x series devices? The Apple marketing material here , states that "iPad offers 256-bit AES encoding…
Rory McCune
  • 62,709
  • 14
  • 153
  • 226
26
votes
6 answers

Spying on a smartphone remotely by the authorities: feasibility and operation

French lawmakers agreed to a justice reform bill that includes a provision granting police the power to remotely activate suspects' geolocation, microphone and camera ( source ). Following the senators, the deputies also gave their green light to…
Yann Rimbaud
  • 361
  • 1
  • 3
  • 3
19
votes
1 answer

What unique device fingerprinting information can an iOS8 app collect?

As an addition to this question: What unique fingerprinting information can an iOS7 app collect? What remaining device fingerprinting privacy/security vulnerabilities still exist as of iOS 8? Can 3rd-party apps still access a list of other running…
pseudon
  • 1,460
  • 12
  • 20
17
votes
2 answers

What unique fingerprinting information can an iOS 10 app collect?

As a follow-on to these questions: What unique fingerprinting information can an iOS7 app collect? What unique device fingerprinting information can an iOS8 app collect? What unique device fingerprinting information can an iOS9 app collect? iOS 10…
pseudon
  • 1,460
  • 12
  • 20
16
votes
2 answers

Android L encryption vs. iOS 8 encryption

Recently, the new full-disk encryption system of Apple's iOS 8 operating system has been in the news . And soon after Apple's release, Google announced that they will also enable encryption by default in the upcoming version of their Android…
Jukka Suomela
  • 339
  • 1
  • 2
  • 7
16
votes
2 answers

Is Apple's push notification service implementation vulnerable to a MitM attack

Recently( more info ) I've spotted a strange message in the logs on my quite recent, fresh installation of OS X Mavericks 10.9.2 Apr 27 15:26:47 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf certificate It appears every 15 minutes or so. I've…
Ivan Kovacevic
  • 2,219
  • 5
  • 22
  • 21
16
votes
8 answers

Keyloggers on Smartphones?

I need to clarify my question. I'm wondering if there are any apps for smartphone that can log each 'keystroke' (i.e. key pressed on touchscreen) that a user does. Performing a google search brings up some links to sites like this and this . These…
Pits
  • 169
  • 1
  • 1
  • 3
15
votes
7 answers

Are jailbroken iPhones an enterprise security risk?

Background My company is currently in the process of rolling out support for the iPhone. As a part of this rollout, they are requiring employees to install an application on their phones that allows IT to push out profiles to the device in order to…
Chris Jackson
  • 251
  • 2
  • 4
15
votes
5 answers

Best practices for securing an iPhone

As this question on voicemail protection got answers veering more to protecting the mobile phone, I thought I should add a specific question on this topic. There is already a question on protecting your Android phone There is a wide range of attacks…
Rory Alsop
  • 61,799
  • 12
  • 123
  • 333
1
2 3
…
34 35