4 ms·
Seems photos are accessible with a new iOS9 flaw: http://www.idownloadblog.com/2015/09/20/ios-9-access-photos-contacts-locked-iphone-security-flaw/ http://www.i
by soisses 11y ago
Seems photos are accessible with a new iOS9 flaw:
http://www.idownloadblog.com/2015/09/20/ios-9-access-photos-contacts-locked-iphone-security-flaw/ http://www.idownloadblog.com/2015/09/20/ios-9-access-photos-...
How can this be, if they are encrypted while the phone is locked?
- linkydinkandyou 11y agoCareful! The paid Apple astroturfers will quickly down vote you off of hacker news!
- dang 11y agoAccusations of astroturfing and shillage without evidence are not allowed on HN, so please don't do this here.
- daxelrod 11y agoMy guess is that contacts and photos remain in the class of things that do not require the phone unlock key. Contacts need to be accessed to display a caller's name when the phone is ringing. Since it's possible to take a photo with the phone locked, the whole photo database may be accessible.
- giovannibajo1 11y agoYes. If you reboot an iOS phone, and then call it without ever entering the passcode before, it will display the phone number but not look it up, because contacts are encrypted. The encryption class here is "locked until first unlock", so they stay unlocked afterwards not to disrupt basic expected user functionality. The whole security design is still much better as many other things stay completely locked.
- mehrdada 11y agoI stand corrected then. Photos are probably still encrypted under "accessible after first unlock" class. Sigh. Sorry for this mistake. The idea of having a security architecture with different classes of data still remains, so a third party app can quite easily leverage this, for instance. Unfortunately there doesn't seem to be a comprehensive list of protection classes that each app uses for its files.