Ios

How to properly encrypt EICES-format messages to be decrypted by the iOS and macOS Secure Enclave system

The key to decrypt the firmware for the Secure Enclave Processor (SEP) on the iPhone 5S has been disclosed. It's actually potentially a good thing.

Slides from my BSidesROC talk, April 23, 2016. An overview of how iOS encryption works, with emphasis on passcoes and potential attacks.

A high-level summary of what we know, what we think we know, and what we know we don't know, as well as some words of caution.

A first, rough look at a new mobile app authentication service from Trail of Bits

Slides from my ShmooCon talk. A short review of multiple iOS apps and how they handle server authentication, looking at both network use and on-device storage of credentials.

A bug in iOS (fixed in 8.1.1) allows a well-timed reboot to bypass the forced lockout timeout, allowing for multiple PIN attempts.

If you've enabled SMS forwarding on your iPhone, you might want to ensure that messages don't get displayed on your Mac when it's locked.

A response from Apple downplays security concerns raised over how Spotlight search works on Yosemite.

Slides from a quick NoVA Hackers talk I pulled together based on recent blog posts about Apple iOS encryption and privacy changes.

The "Apple can't decrypt devices for law enforcement" conversation continues to spawn excellent posts and explanations.

Making sense of how iOS encryption works, especially what's changed in iOS 8 and how Apple made it harder for law enforcement, can be difficult. I'll try to help.

Advertising companies are placing Bluetooth beacons in New York City phone booths. Forbes explains this isn't quite as scary as many think.

A quick overview of changes to iOS configuation profile settings in the current iOS 8 beta.

A consolidated list of known malware for iOS. Depending on your definition of malware.

Recent reports of users getting locked out of their iOS devices, probably due to compromise of their Apple ID password.

DerbyCon 2013 - Apple TV and Raspberry Pi Slides

Last year, Apple introduced advanced power saving techniques. Can they do the same for memory? There’s never enough to smoothly switch between apps. If they can fix that, a world of opportunities opens.

Backing up iOS devices to iCloud is still opaque and unreliable. And iTunes Wi-Fi backups just don't work at all.

How we set up multiple personal iCloud accounts for the family, and a couple of shared accounts for parents and kids.