A Message to Our Customers

Re:A Message to Our Customers by Trundle on Wednesday February 17, 2016 @04:22AM (#11116477)

I don't have an iPhone so correct me if I'm remembering correctly but aren't they by default protected by a 4 digit numeric pin? A 4 digit numeric pin that a brute force attack can be used on is effectively no security/a backdoor imo.

[ Parent | on HN ]

Re:A Message to Our Customers by RobJDavey on Wednesday February 17, 2016 @04:54AM (#11116677)

There are escalating time limits on incorrect PIN attempts, which is also enforced in hardware by the Secure Enclave in A7 chips and above. This would mean even breaking a 4-digit pin code without that delay being removed would take a long time. Additionally the device may be set to wipe after 10 incorrect attempts.

Attempts | Delay

1-4: none

5: 1 minute

6: 5 minutes

7-8: 15 minutes

9: 1 hour

Source: https://www.apple.com/business/docs/iOS_Security_Guide.pdf

[ Parent | on HN ]

Re:A Message to Our Customers by andreyvit on Wednesday February 17, 2016 @09:25AM (#11117997)

Secure Enclave is _not_ hardware; despite being isolated from the main OS and CPU, it is still software-based and accepts software updates signed by Apple.

[ Parent | on HN ]

Re:A Message to Our Customers by mynameisvlad on Wednesday February 17, 2016 @04:33AM (#11116543)

I believe the default on new installs is now 6, but options for a more complex PIN, either numeric or straight up alphanumeric, are available.

[ Parent | on HN ]

Re:A Message to Our Customers by zenbsd on Wednesday February 17, 2016 @07:16PM (#11122682)

I use an alphanumeric password on all my iOS devices

[ Parent | on HN ]