Re:A Message about iOS Security
by kllrnohj on Friday September 06, 2019 @07:28PM
(#20900786)
> All the "hacks" against iCloud have been social engineering
Which would be a strike against Apple...
> I don't see how users re-using passwords across sites or using weak passwords makes iCloud security a joke.
Logins from new locations is the type of thing other cloud services (like Google or Facebook) protect against by requiring a challenge to proceed even if 2-factor is not enabled.
iCloud only working when the user holds it properly is a very Apple-esque thing, but also still bad. Particularly their 2FA is pretty bad and can be easily bypassed. Because, you know, that good UX flow is preferred to actual security.
Which would be a strike against Apple...
> I don't see how users re-using passwords across sites or using weak passwords makes iCloud security a joke.
Logins from new locations is the type of thing other cloud services (like Google or Facebook) protect against by requiring a challenge to proceed even if 2-factor is not enabled.
iCloud only working when the user holds it properly is a very Apple-esque thing, but also still bad. Particularly their 2FA is pretty bad and can be easily bypassed. Because, you know, that good UX flow is preferred to actual security.