2 ms·
Until it get fixed (if), everybody who does the local backup and worries about its possible bruteforcing should 1. wipe his previous ios10 backups 2. if the b
by acqq 10y ago
Until it get fixed (if), everybody who does the local backup and worries about its possible bruteforcing should
1. wipe his previous ios10 backups
2. if the backup password is not significantly long, increase the length of his backup password with some random enough material.
And, of course, never forget that "$5 wrench" comics.
I still hope Apple will publicly respond on this. It simply doesn't fit with the other steps they did at least starting with iPhone 5s.
- pfg 10y agoThe article seems to suggest that an attacker would be able to perform a (new) backup without unlocking the phone if they had access to a "pairing record from a trusted computer", which I assume means an iTunes installation that's paired with the phone. In other words, you might have to unpair the phone (or protect the iTunes installation with FDE) in addition to deleting any backups.