A mere three days after I published an article touting the enhanced security of the iPhone 3GS - see "iPhone 3GS Offers Enterprise-Class Security for Everyone", 2009-07-20 - security researcher Jonathan Zdziarski revealed a simple, only moderately technical technique for completely circumventing the iPhone's passcode lock and encryption. As a result, the iPhone 3GS encryption can no longer be considered a security control for consumers or enterprises until Apple releases a fix.. Although encryption is one of the most fundamental tools available in the security arsenal, it can be difficult to implement properly. In this case, it isn't that the encryption itself is flawed (although that happens), but that the implementation of the encryption leaves cracks for attackers. . The iPhone 3GS represented a major leap in mobile tech, yet it harbors encryption vulnerabilities that may jeopardize users' private data, highlighting the need for vigilance. iPhone Encryption, Data Protection, Security Flaws. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.