Apple – Privacy – Government Information Requests

Re:Apple – Privacy – Government Information Requests by acdha on Thursday September 18, 2014 @09:56AM (#8335197)

It's not quite milliseconds. According to https://www.documentcloud.org/documents/1302613-ios-security... they've increased the iteration count somewhat:

“The passcode is entangled with the device’s UID, so brute-force attempts must be performed on the device under attack. A large iteration count is used to make each attempt slower. The iteration count is calibrated so that one attempt takes approximately 80 milliseconds.”

This is still an argument for using a longer length code, however, since a simple 4-digit number would only take 800 seconds to brute force.

[ Parent | on HN ]

Re:Apple – Privacy – Government Information Requests by fletom on Monday September 29, 2014 @10:14PM (#8386443)

This can't be true. If you restore your iCloud backup to a new device, all you need is your passcode. It obviously won't ask you to enter the UID of the device you previously backed up with.

[ Parent | on HN ]