Mailbox iOS app is not even using file protection API that iOS SDK provides by default.
Mailbox iOS app is a security fail
subhb.org
Mailbox iOS app is a security fail
1–10 of 60 posts
Re: Mailbox iOS app is a security fail
#2[deleted]
Re: Mailbox iOS app is a security fail
#3“if anyone else can get hold of your phone, he can access to files of those apps where data is not protected.”
As always, if someone has physical access and unlimited time, no device or computer is safe.
Also, Mailbox.app only supports GMail. Security minded people are obviously not the target market.
Re: Mailbox iOS app is a security fail
#4An important fact is wrong: You actually need to unlock the device to access the data unless the iPhone and the computer were paired before.
Re: Mailbox iOS app is a security fail
#5“if anyone else can get hold of your phone, he can access to files of those apps where data is not protected.” As always, if someone has physical access and unlimited time, no device or computer is safe. Also, Mailbox.app only supports GMail. Security minded people are obviously not the target market.
Does that mean that basic security should not be in a company's mind, especially when it comes to the kind of data emails can contain? Mailbox is BIG. We are not talking of an average app here!
Re: Mailbox iOS app is a security fail
#6An important fact is wrong: You actually need to unlock the device to access the data unless the iPhone and the computer were paired before.
Don't have any data on this, but I know a bunch of not-so-tech-savy people that don't use lock codes. Their data's then as naked as a greek nude.
Re: Mailbox iOS app is a security fail
#7An important fact is wrong: You actually need to unlock the device to access the data unless the iPhone and the computer were paired before.
This is correct @nezza. I should have verified this with my friend's iPhone first. But the original issue still remains the same which is the files are not protected!
Re: Mailbox iOS app is a security fail
#8An important fact is wrong: You actually need to unlock the device to access the data unless the iPhone and the computer were paired before.
Don't have any data on this, but I know a bunch of not-so-tech-savy people that don't use lock codes. Their data's then as naked as a greek nude.
If the device is not locked, how about just launching the Mailbox app and browse the attachments via its fancy UI? :)
Re: Mailbox iOS app is a security fail
#9Earlier quoted context omitted.
Don't have any data on this, but I know a bunch of not-so-tech-savy people that don't use lock codes. Their data's then as naked as a greek nude.
If the device is not locked, how about just launching the Mailbox app and browse the attachments via its fancy UI? :)
On any app that consists of sensitive information, one should probably implement passcode security on the application itself. Now this might annoy some users, but if you know you are going to use it for something special, you won't mind it!
Re: Mailbox iOS app is a security fail
#10“if anyone else can get hold of your phone, he can access to files of those apps where data is not protected.” As always, if someone has physical access and unlimited time, no device or computer is safe. Also, Mailbox.app only supports GMail. Security minded people are obviously not the target market.
Does that mean that basic security should not be in a company's mind, especially when it comes to the kind of data emails can contain? Mailbox is BIG. We are not talking of an average app here!
“Does that mean that basic security should not be in a company's mind”
I wasn’t suggesting it shouldn’t be. My point is that the article’s headline is overly dramatic: Mailbox.app is not a complete security failure because of one hack that requires physical access. Given that Mailbox only supports GMail, I’d be more worried to put my email in Google’s hands than worrying over someone grabbing my phone out of mine.
“Mailbox is BIG. We are not talking of an average app here!”
Mailbox.app is a free app that has been downloaded a couple of million times, I wouldn’t call it “BIG” yet. It’s very new, it’s still on version 1, so it’s not expected to be perfect.