4 ms·

Dup: http://news.ycombinator.com/item?id=2201213 http://news.ycombinator.com/item?id=2201213 No votes, no comments, no attention, no traction.

• stcredzero 16y ago
  Newsflash: You can do what you want on a jail broken iPhone. This includes running Keychain tools. The same goes for laptops, and has been true forever. Physical possession = no security applies. Not news, exactly.
  • deleted 16y ago
    [deleted]
  • travisp 16y ago
    This isn't really accurate. For example, if I have good whole disk encryption on my laptop, and it's stolen, I am reasonably well protected assuming I used a good password. Yes, the hardware could be tinkered with, the laptop could be given back to me, I could enter my password and then the laptop could be stolen again, but that's not quite the same thing. It's significant because some other smart phones have fairly strong encryption options that would prevent an attack like this, AFAIK.
  • DougBTX 16y ago
    The keychain is encrypted with the user's login password on OSX, you need the login password to decrypt the passwords stored in the keychain. The point being made in the article is that changing your iPhone pin/password does not re-encrypt the saved passwords since they are encrypted with a fixed key.