Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Identifying backdoors, attack points, and surveillance mechanisms in iOS devices

zdziarski.com

Post reply on HN
Print view View original

1–10 of 87 posts

Re: Identifying backdoors, attack points, and surveillance mechanisms in iOS devices

#2

Post by majke »

Mr Zdziarski gave this talk also at the HOPE conference yesterday. It's highly recommended. Slides:

http://www.zdziarski.com/blog/wp-content/uploads/2014/07/iOS...

For the people wanting to secure their iphone, go to the end to the slide "Apple Configurator" and follow the described steps to disable your iphone from paring with anything.

Re: Identifying backdoors, attack points, and surveillance mechanisms in iOS devices

#6

Post by wyager »

>This is due to iOS' behavior of automatically joining networks whose name (not MAC address) it recognizes, such as “linksys” or “attwifi”.

Discriminating by MAC addresses would not help at all. MAC addresses are trivial to spoof, even though they are "in hardware".

It would be cool if we had a standardized trust-on-first-use cryptographic authentication model for wireless APs, like we do with SSH right now. You connect to the AP, it sends you its pubkey, your phone says "Do you want to trust AP with key AB:CD:BE:EF...". The discriminating paranoid person can choose to make sure this is the right key hash, and the average person gets at least limited protection from later AP spoofing attacks.

Re: Identifying backdoors, attack points, and surveillance mechanisms in iOS devices

#7

Post by mooism2 »

majke wrote: post #2

Mr Zdziarski gave this talk also at the HOPE conference yesterday. It's highly recommended. Slides: http://www.zdziarski.com/blog/wp-content/uploads/2014/07/iOS... For the people wanting to secure their iphone, go to the end to the slide "Apple Configurator" and follow the described steps to disable your iphone from paring with anything.

Step 1: buy a Mac :-/
Post reply on HN