1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

Researcher says Apple fibs about crypto for iOS email attachments

Discussion in 'Security Updates' started by snoopy, May 5, 2014.

  1. snoopy

    snoopy Registered Members

    Joined:
    Aug 1, 2010
    Messages:
    1,671
    Location:
    At my computer
    Operating System:
    Windows 7
    Computer Brand or Motherboard:
    custom built -
    Apple has been busted for falsely claiming that email attachments sent from iOS are encrypted.

    German researcher Andreas Kurtz found email attachments for POP, IMAP and ActiveSync accounts were available in clear text on iPhone 4, 5s and iPad 2 devices.

    "A few weeks ago, I noticed that email attachments within the iOS 7 MobileMail.app are not protected by Apple's data protection mechanisms," Kurtz said in a blog. "Considering the long time iOS 7 is available by now (sic) and the sensitivity of email attachments many enterprises share on their devices - fundamentally relying on data protection - I expected a near-term patch." Email attachments were exposed on firmware iOS 7.1.1, 7.1 and 7.0.4 which Kurtz probed by jailbreaking devices using free tools.

    Further details can be read here: http://www.theregister.co.uk/2014/05/02/nope_ios_email_attachments_arent_encrypted/
     
    snoopy, May 5, 2014
    #1

Share This Page