Jul 24, 2014 : Apple Denis Use of Hidden iOS Backdoors
📅 - Apple has released a statement concerning the allegations of a forensics expert who claims there is a “backdoor” installed on every iOS device that allows the company to collect users data.
“As we have said before, Apple has never worked with any government agency from any country to create a backdoor in any of our products of services,” said Apple in a statement.
During the Hackers On Planet Earth (HOPE) conference in New York, hacker Jonathan Zdziarski, better known as NerveGas, discussed Apple's use of backdoors in his presentation titled “Identifying Backdoors, Attack Points, and Surveillance Mechanism in iOS Devices.”
Zdiarski notes that the backdoors are initialized when devices running iOS are connected to a computer using a USB cable.
“The iOS device and the computer swap security certificates with each other to establish a secure relationship, exchanging encryption keys needed to set up encrypted SSL channels,” says a report from TechTimes. “This pairing cannot be undone unless the iOS device is wiped or the computer is restored to its original factory settings.”
In order to access this, hackers must have the pairing keys, access to the same wireless network that the device is on, and know exactly where the device will be.
Zdiarski said in his presentation that iOS's “sole purposes is to dish out data, bypass backup encryption, and give you alomost the same amount of personal data you get form a backup on the phoine, in some cases even more.”
Apple acknowledged his claims with the following statement:
“We have designed iOS so that its diagnostic functions do not compromise user privacy and security, but still provides needed information to enterprise IT departments, developers and Apple for troubleshooting technical issues. The user must agree to share this information, and data is never transferred without their consent.”
“As we have said before, Apple has never worked with any government agency from any country to create a backdoor in any of our products of services,” said Apple in a statement.
During the Hackers On Planet Earth (HOPE) conference in New York, hacker Jonathan Zdziarski, better known as NerveGas, discussed Apple's use of backdoors in his presentation titled “Identifying Backdoors, Attack Points, and Surveillance Mechanism in iOS Devices.”
Zdiarski notes that the backdoors are initialized when devices running iOS are connected to a computer using a USB cable.
“The iOS device and the computer swap security certificates with each other to establish a secure relationship, exchanging encryption keys needed to set up encrypted SSL channels,” says a report from TechTimes. “This pairing cannot be undone unless the iOS device is wiped or the computer is restored to its original factory settings.”
In order to access this, hackers must have the pairing keys, access to the same wireless network that the device is on, and know exactly where the device will be.
Zdiarski said in his presentation that iOS's “sole purposes is to dish out data, bypass backup encryption, and give you alomost the same amount of personal data you get form a backup on the phoine, in some cases even more.”
Apple acknowledged his claims with the following statement:
“We have designed iOS so that its diagnostic functions do not compromise user privacy and security, but still provides needed information to enterprise IT departments, developers and Apple for troubleshooting technical issues. The user must agree to share this information, and data is never transferred without their consent.”
Reads: 1548 | Category: General | Source: TheHN : The Hosting News
Want to add a website news or press release ? Just do it, it's free! Use add web hosting news!