3 ms·
You are assuming the password is the key to authenticating. It might be, but it also might be that there's a two way handshake that sets up an encryption key fo
by jsjohnst 11y ago
You are assuming the password is the key to authenticating. It might be, but it also might be that there's a two way handshake that sets up an encryption key for transmission of backups in a somewhat similar manner to how PFS works with SSL.
- ikeboy 11y agoWhatever it was, changing the Apple ID password changes something on Apple's servers, and if they have the old state they can change it back. The only two obstacles I see is if 1. Apple deletes info from their server on password reset 2. The phone was on, and already received the message not to try to sync anymore because of the password change Both seem unlikely but possible.
- jsjohnst 11y agoYou missed the entire point of my post. If I was designing a protocol I intended to be secure, I would add code that would fail if the password was changed and then changed back. I'm not saying Apple did this, but it's entirely possible they did.