INSECURITY RESEARCHERS have busted an Iphone's encryption protection in just six minutes to gain access to passwords.
Boffins at the Fraunhofer Institute for Secure Information Technology (SIT) in Germany devised the hack. The researchers did the tests to demonstrate that passwords aren't secure on Iphones that have been lost.
They obviously had a point to prove and weren't happy with just hacking Apple's shoddy security encryption in six minutes. Within the allotted time, the team also managed to retrieve most of the passwords stored on the Iphone, accessing personal data that could be used to get into bank accounts.
What's great about this hack is that the team spends some time in its report tellng us that it renders the Iphone completely vulnerable as a business tool. It could even make a company's network security vulnerable as well.
The flaw affects all Ithings with the latest firmware and the team didn't even have to break the more complicated 256-bit encryption. They simply bypassed that because passwords are stored within IOS itself, making the encryption technology pointless, apparently even on Iphones with security settings set on high.
Potential attackers can remove an Iphone's SIM card and can also gain access to email passwords and access codes for corporate VPNs and WLANs. This amounts to a serious hit against Apple's recent push to position its Iphone as a valid corporate proposition, having recently added more business oriented features to its consumer smartphone software portfolio than ever before.
The Fraunhofer Institute SIT team suggess that anyone who has lost an Iphone shoud change their passwords. More importantly, companies should also change their network identifications as well.
You can watch how they busted into an Iphone in six minutes here. µ
iIsIncesure
iAmSrewed
iSuck
iAmCompromised
iGotHacked
iSharePasswords
Apple showing lack of security. Nothing new here.
Well if they encrypt the passwords, again they'll have to store the encryption key somewhere, smartass. Unless the owner is supposed to take note of a 256-bit data stream and they type its hex value whenever he wants to use the Iphony.
Well, on a second thought, Apple fanboys wouldn't mind doing that if their overpriced gadget tells them to. Something so expensive might not be wrong.
My wifes info couldn't be safer on her droid as no-one would bother taking it in the first place
All you have to do is encrypt the passwords etc stored in the iPhone in case it is lost.
Wowo see one udate and the world keep on turning :S
It needs to be able to make call reliably 1st
Anyone caught with ithing for business should be tied to a server rack and whipped with CAT5 cables