iOS Security White Paper

[loganryan99]

I got bored and decided to skim over parts of this, mainly the parts about how unlocking and locking an iOS device works. It turns out that a lot of processes on an iOS device that seem extremely simple to the user with smooth, flashy animations, like unlocking and locking the device, are actually fairly complex. Especially with Touch ID in the mix. 

 

https://www.apple.com/business/docs/iOS_Security_Guide.pdf

 

A lot of people criticize Apple for trying to fix jailbreaks and stuff, but I think their security is pretty awesome tbh. It feels good knowing that it's getting extremely difficult (and with iOS 9, practically impossible thanks to rootless) for people to get unauthorized access to stuff on my phone. 

[Arty]

If only same could be said with icloud.

[Guest]

If only same could be said with icloud.

 

Why? Because a few celebs probably used "(inserts pet's name here)123" as their password? 

[Arty]

Why? Because a few celebs probably used "(inserts pet's name here)123" as their password? 

Terrible sarcasm on my part

Ik its prob secured just fine.

[Altecice]

I agree, Apple are good with security but its only down to the fact that they lock the OS down and lock down the hardware. Its MUCH easier to make things safer with you dictate what can and cant be done on them. 

[Guest]

Terrible sarcasm on my part

Ik its prob secured just fine.

 

Yeah, it's probably as secure as any other cloud service; just those few celebs who decided to us a pathetic password and clearly didn't have two-step on: https://support.apple.com/en-gb/HT202303

[Guest]

I agree, Apple are good with security but its only down to the fact that they lock the OS down and lock down the hardware. Its MUCH easier to make things safer with you dictate what can and cant be done on them. 

 

So, do you think that's a bad thing?

[Altecice]

So, do you think that's a bad thing?

 

Its the right idea but implemented in a bad way.

[Nuluvius]

All of that extra security also equates for a fairly hellish development experience where you have to worry about authorizing the device and installing certificates per terminal. Contrast that to the simple plug it in and deploy that the Android platform sports.

 

Not much will change dim view of Apple, their garbage products and trash APIs.