Researcher says Apple fibs about crypto for iOS email attachments

  • 2 May 2014
  • 2 replies
  • 3104 views

Userlevel 7
Badge +54
Latest iPad and iPad firmware reveals attachments in clear text.
 
Apple has been busted for falsely claiming that email attachments sent from iOS are encrypted.
German researcher Andreas Kurtz found email attachments for POP, IMAP and ActiveSync accounts were available in clear text on iPhone 4, 5s and iPad 2 devices.
 "A few weeks ago, I noticed that email attachments within the iOS 7 MobileMail.app are not protected by Apple's data protection mechanisms," Kurtz said in a blog.
"Considering the long time iOS 7 is available by now (sic) and the sensitivity of email attachments many enterprises share on their devices - fundamentally relying on data protection - I expected a near-term patch."
 
Full Article

2 replies

Userlevel 7
Badge +54
A glaring bug in Apple’s iOS 7 mobile operating system has resulted in every email attachment sent on an iPhone or iPad being sent completely unencrypted, according to new disclosures.
According to the official support documentation provided by Apple, iOS provides data protection on all devices that offer hardware encryption -- specifically the iPhone 3GS and later, all iPads, and the third-generation iPod touch and later.
But security researcher Andreas Kurtz has discovered that iOS version 7.0.4 and later, including 7.1.1, has a bug that results in attachments not being encrypted.
 
Full Article
Userlevel 7
Badge +54
There is a bug in iOS 7 that prevents email attachments from being encrypted on your device. The good news is, Apple's already working on a solution.
An Apple spokesperson told iMore that Apple "is aware of the issue and are working on a fix which will be delivered in a future software update."
The flaw was first reported by Andreas Kurtz, who noticed that he was able to access email attachments when accessing the iOS 7 file system without entering in a passcode.
 
Full Article

Reply