4 ms·
There is no accessible “database” for Wallet, these are just digital versions of cards that are stored on your local device in the Secure Enclave. Some items in
by cmckn 5y ago
There is no accessible “database” for Wallet, these are just digital versions of cards that are stored on your local device in the Secure Enclave. Some items in Wallet, such as a credit card, may be included in an (encrypted) iCloud backup, but with some of their critical bits omitted (such as the CVV). It’s really not a different security profile than an analog card. While there could feasibly be a vulnerability giving remote access to the contents of the Secure Enclave (anything is possible, right?) that would be highly targeted and would almost certainly be harder to pull off than some simple social engineering if you just want someone’s SSN or student ID number.
- devwastaken 5y agoYes, a database, on your phone, connected to the internet, with applications everyone else has also connected to the internet. You don't have to singularly exploit every individual phone with brand new attacks. You design one attack and use it again and again. Targeted attacks are no longer a "rarity", it's the natural result of having singular software platforms. Iphones are very popular, and very wealthy and powerful people use them, therefore they become a very lucrative target. Snowden was talking about the Pegasus project before we even knew the name of it. The ability to just exploit someones phone via a text message, no user interaction. There are plenty more where that came from, don't worry.