Re:Mailbox iOS app is a security fail
by fruitydrink on Wednesday April 24, 2013 @08:45AM
(#5601136)
@Samuel_Michon
I take issue with the crap you are spreading.
>if someone has physical access and unlimited time
There is no such thing as unlimited resources.
If I had unlimited time I could crack every encrypted message on the planet.
Using DPAPI turns a 30 second hack into an online cracking job. The crypto processor in the iPhone can only check one password every ~80ms and you need the chip with you. An attacker cannot do an offline attack.
>if someone has physical access and unlimited time There is no such thing as unlimited resources.
If I had unlimited time I could crack every encrypted message on the planet.
Using DPAPI turns a 30 second hack into an online cracking job. The crypto processor in the iPhone can only check one password every ~80ms and you need the chip with you. An attacker cannot do an offline attack.