iOS 10 scrambles new vulnerabilities backup files easily cracked by hackers

The Verge Chinese Station reported on September 26

According to the latest report from Forbes, Apple's iOS 10 system seems to have some problems with security. Users' local backup files can be maliciously accessed without authorization.

A Russian security company named Elcomsoft stated on its blog that a new password authentication mechanism has appeared in the backup files of iOS 10. However, this mechanism has omitted some previous security checks, allowing hackers to make it faster and easier. To get the key information in the backup.

The Elcomsoft team targeted the iOS 10 backup as a crack target. If the attacker's backup does not have an associated password, then the iOS 10 backup file is 2500 times faster than the previous iOS 9 backup cracker. Previously, the team's tools could crack 2,400 passwords per minute when cracking iOS 9 backups. This time in iOS 10 backups, the number of cracked passwords per minute actually reached 6 million.

Therefore, the iTunes backup file on iOS 10 has become a very weak link. The Elcomsoft team pointed out that if you want to access the hardware or iCloud account has now become very difficult, but access to iTunes backup has become easy. The iTunes backup file contains various files such as contacts, text messages, call logs, photos and videos, as well as passwords saved on various websites. Therefore, once the iTunes backup file in iOS 10 is cracked, the user's data is safe. It will be seriously threatened.

However, according to the latest news from Forbes, Apple has recognized this problem and stated that it has begun to repair it. “We have learned about the impact of the vulnerability caused by the vulnerability when iOS 10 devices use iTunes for Mac or PC backup. We will fix this vulnerability in the next security update. This will not affect iCloud's Backup." Apple spokesman said, "We recommend that users ensure that their Mac or PC has strong password protection and can only be accessed by authorized users. FileVault full-disk encryption provides additional security."

Therefore, whether it is users who have already upgraded iOS 10 or have not yet upgraded, what they can do now is to wait patiently. After Apple fixes this loophole, it can then back up the data again. (Author: Andrew Liptak compilation: Bear)

Click to view original english

The Chinese related rights of the works of The Verge in the United States belong to Tencent Corporation and may not be reproduced or excerpted without authorization.

.wxdigi { padding:20px 0; border-top: 1px dotted DBDBDB; }

General Inductor

Usb Common Mode Choke,Magnetic Ring Inductor,Wurth Inductor,Coilcraft Inductor

IHUA INDUSTRIES CO.,LTD. , https://www.ihua-transformer.com

Posted on