security-researchers-are-calling-for-more-protection-for-iphone-data

Security researchers are calling for more protection for iPhone data

Apple and app developers do not make sufficient use of the security functions available in iOS. Renowned IT security experts from Johns Hopkins University are convinced of this. Compared to the US magazine Wired they sometimes sharply criticized the current approach. It “really shocked him,” said crypto expert Matthew Green, because he thought these devices “protect user data well”. He wonders why the often requested back doors for criminal prosecutors are needed at all.

Levels of security Specifically, Green and his colleague Maximilian Zinkus, who specializes in iOS security, are concerned the fact that hierarchical encryption is simply not used in large parts. When an iPhone boots, it is first in the so-called “Complete Protection” mode before the user unlocks it. Then the decryption takes place.

Problem Quick Access Afterwards, however, a large part of the data from the system and apps ends up in the area “Protected Until First User Authentication” (protected until the first user authentication). According to the Johns Hopkins researchers, this state is less secure because the keys required to decrypt the device data are automatically transferred to the quick access memory area. This is used to give applications faster access.

Use by hacker tools This is not fundamentally unsafe. However, this means that attackers who manage to bypass basic iOS backups have significantly easier access to them than in “Complete Protection” mode. The researchers believe that hacking tools such as Grayshift used by security agencies are exploiting Apple’s decision. These can “open” iPhones completely and often use holes that are still publicly unknown.

Apple: Developing further The Johns Hopkins researchers call on Apple to address the problem. Compared to Wired the group announced that Apple devices were provided with “several security layers” in order to be protected against “a wide range of potential threats”. They are “constantly working on adding further protective measures for our users’ data”. It remains to be seen whether this means that Apple will respond to Green & Co.’s criticism. The group also announced that the attacks described were “very expensive” and that attackers would have to physically have the device in front of them. Apparently Apple sees its current strategy as a compromise between security and ease of use. (bsc)

samsung-smarttag:-this-is-how-the-''-small-''-bluetooth-accessory-works-so-as-not-to-lose-anything!

Samsung SmartTag: this is how the '' small '' Bluetooth accessory works so as not to lose anything!

In addition to the various smartphones of the Galaxy series S 10 and Galaxy Buds Pro earphones, Samsung also presented the so-called SmartTag yesterday, which is a Bluetooth accessory that will allow users to never lose any object. Here’s how it works.

by Bruno Mucciarelli published , at 11: 14 in the Telephony channel

Samsung

In addition to Galaxy S series smartphones 21 and to the earphones Galaxy Buds Pro , Samsung, has decided to present a small but ingenious Bluetooth accessory capable of allowing everyone not to lose any type of object it will be associated with. Let’s talk about the Samsung SmartTag that is a small square-shaped device a few millimeters thick and equipped with a Bluetooth 5.0 LE module capable of being located in any place and therefore capable of ” following ” every single object to which it will be associated such as keys, wallet or other.

Samsung SmartTag: here’s how it’s done and how it works

SmartTag measures 4 x 4 cm and is approximately 1 cm thick with a weight that is just over 10 grams. It can boast the IP certification 53 and is powered by a battery from 220 mAh which should guarantee an autonomy of 280 days before being replaced. The small accessory can be connected to the house or car keys, to the backpack, to the dog collar or wherever you want, with the possibility of discovering its position at any time thanks to the Bluetooth 5.0 LowEnergy . Galaxy Smart Tag is made of plastic and as mentioned it is also created to withstand rain, a very useful function especially when used with pets.

How does it work? Among the peculiarities of Galaxy SmartTag there is the possibility of using SmartThings Find , the new feature being released by Samsung, to find the tag using the Galaxy product network. Even if it’s not connected directly to a Galaxy smartphone, the tag emits a BLE signal that can be picked up by nearby Galaxy devices. At this point the information collected, encrypted and protected, is sent to the owner , the only one who will be able to accurately know its position, with the possibility of quickly recovering the ” lost ” device. Specifically, the new Galaxy SmartTag accessory sees the presence of a button that allows you to quickly find the connected smartphone. Moreover, thanks to the app created specifically by Samsung, it will be possible to customize the function of the button on the tag and maybe use it to turn on the home light using SmartThings.

Who will buy one of the smartphones of the Galaxy S line 21 from 14 to the 28 January will receive a free SmartTag . SmartTag is marketed at price of 34, 90 euro and is available starting today. During the presentation, Samsung also announced the arrival of a second version , SmarTag +, equipped with UWB module but will arrive later in the year.