News for hackers. Stuff that matters.

A comment on Zero click vulnerability in Apple’s macOS Mail. Parent comment

Re:Zero click vulnerability in Apple’s macOS Mail by gumby on Thursday April 01, 2021 @09:15PM (#26668219)
> Pixel which encrypt your device backups with on-device hardware encryption.

Can you set up a new android phone from an old phone’s backup? If so, how could this work?

This is a standard way to set up a new iPhone: “restore” from a backup of your previous phone. Especially handy when your old phone is no longer available (lost/broken)

[ Parent | on HN ]
Re:Zero click vulnerability in Apple’s macOS Mail by glennpratt on Friday April 02, 2021 @02:15AM (#26669363)
Yes, decryption requires the original device's unlock PIN/pattern/password:

https://security.googleblog.com/2018/10/google-and-android-h...

Not that I fully understand how hard it is to circumvent.

[ Parent | on HN ]
Re:Zero click vulnerability in Apple’s macOS Mail by gumby on Friday April 02, 2021 @11:31AM (#26672247)
Oh, I see. Apple has done that since the original iPhone too, and I believe iPod before it. I thought you meant they used a hardware key.
[ Parent | on HN ]
Re:Zero click vulnerability in Apple’s macOS Mail by codemac on Friday April 02, 2021 @02:47PM (#26674557)
For your backups - but once you use iCloud to sync devices in real time, they just use their service keys, and your iCloud credentials are enough to read your iMessage history.
[ Parent | on HN ]