After rapidly patching a flaw that allowed anyone with access to a High Sierra Mac to obtain administrative control, Apple still has more work to do to make its software secure, namely iOS 11, it was claimed this week. What's left, he argued, is a single point of failure: the iOS device passcode.
Before the release of iOS 11, Alfonin explained in a phone interview with The Register, there were several layers of protection in iOS. What changed was the iOS device backup password in iTunes. In iOS 10 and earlier, users could set a unique password to secure an encrypted backup copy of the data on an iPhone. That password travelled with the hardware and if you attempted to connect the iPhone to a different computer in order to make another backup via iTunes, you'd have to supply the same backup password. In iOS 11, everything changed.
That's a security problem because device backups made through iTunes contain far more data than would be available just through an unlocked iPhone. And that data can be had through the sort of forensic tools Elcomsoft and other companies sell. Alfonin explains in his post. So the risk goes beyond the compromised phone and any associated Apple devices: Apple's iCloud Keychain could include, say, Google or Microsoft passwords.
What code is running on Apple's Secure Enclave security chip, Alfonin in his post suggested "Apple gave up" in the wake of complaints from police, the FBI, and users. Nonetheless, the iOS change has significant implications for those who deal with authorities, at border crossings for example. With that passcode, authorities could create their own device backup and store it, which would allow them to go back and extract passwords unrelated to the device itself later on.
Alfonin said with iOS 11, Apple's entire protection scheme has fallen apart. He likened the situation to the 2014 iCloud hack known as Celebgate. To fix the issue, Alfonin suggests going back to the way things were. Of course, this is just Alfonin and Elcomsoft's opinion. Note that they don't require just an unlocked device or unlocked device and authenticating with Touch ID.
You need to enter the passcode on an unlocked already trusted device to reset passwords and such. Apple did not respond to a request for comment. PS: Apple's iPhone X shares face scans with apps, which has some people worried. Also, if you have installed the password-less root security patch on macOS 10.13.0, and then upgraded to 10.13.1, make sure you reinstall the patch - Apple's Software Update mechanism should do this automatically - and reboot. The upgrade from .0 to .1 nukes the emergency fix.
But you can grab somebody’s profile photo if you know the method. It is not that difficult to do. Open the WhatsApp folder on your phone’s file explorer. There you can find a subfolder named profile pictures. Just copy the pictures you want to keep. No, no, do not get too much excited. You can not actually enter inside WhatsApp server to change someone’s profile picture globally. But you can change it on your phone.
So, if you want to hide the photo of a beautiful girl who is your friend with an elder sister type woman, you can easily do it. Profile Picture. Choose the photo which you want to change. Then, rename the photo which you want with the contact’s mobile number with country code. Now copy the new photo and paste it inside the Profile Picture folder.
After that, you can see that photo as your friend’s profile picture only on your phone. It is very much possible that your phone might be checked by friends or relatives or small sister or brother. In this case, you may not want them to look around your WhatsApp. So, it should be locked.
There are many app lockers available in the Google Play Store. “Messenger and Chat Lock Pro” is one of the best among these apps. It is specially designed for WhatsApp. This app is very simple and use very little battery juice and CPU resources. You can change the theme of WhatsApp i.e., you can alter the look and feel of the app.
0 Comments