News for hackers. Stuff that matters.

A comment on Let's talk about iMessage again. Parent comment

Re:Let's talk about iMessage again by ejdyksen on Monday September 14, 2015 @09:53AM (#10215038)
I've upgraded to iOS 9 GM and El Capitan GM, and I saw some new items show up in my iCloud Keychain, titled:

    PCS Backup
    PCS CloudKit
    PCS Escrow
    PCS FDE
    PCS iCloudDrive
    PCS iMessage
    PCS Maildrop
    PCS MasterKey
    PCS News
    PCS Notes
    PCS Photos
(They also have what looks like a base64 string in there, but I'm excluding that just in case it might be secret)

Just a guess, but between this and the fact that iCloud Backups were broken during the iOS 9 beta period, it seems like they might be encrypting backups now, as well.

[ Parent | on HN ]
Re:Let's talk about iMessage again by dantiberian on Monday September 14, 2015 @04:37PM (#10217315)
The problem with encrypting backups is what do they use as the encryption key? You have to have some route back to the users password, as that's what they'll be using to restore. That leaves it vulnerable to a LE password reset even if the backup is encrypted.
[ Parent | on HN ]
Re:Let's talk about iMessage again by ejdyksen on Monday September 14, 2015 @05:03PM (#10217450)
iCloud Keychain solves this problem, if you use a complex passphrase:

http://www.slideshare.net/alexeytroshichev/icloud-keychain-3...

[ Parent | on HN ]