Lost iPhone? – Lost Passwords

Encryption by itself does not provide protection

iPhone weakness demonstrates that encryption by itself does not provide protection – companies have to react quickly when an iPhone is lost.

Passwords are not secure on iPhones that are lost. This is the result of tests carried out at Fraunhofer Institute SIT in Darmstadt. Within six minutes the institute’s staff was able to render the iPhone’s encryption void and decipher many passwords stored on it. If the iPhone is used for business purposes then the company’s network security may be at risk as well. The flawed security design affects all iPhone and iPad devices containing the latest firmware. Written documentation and a video about the attack are available below. Only companies prepared for such an attack will be able to reduce their risk.

Updates

Contact
Dr. Jens Heider
Dr. Jens Heider
Testlab Mobile Security
Phone +49 6151 869-233