Checklist 113: Security Breaks and Fixes in iOS

Checklist 113: Security Breaks and Fixes in iOS

A slightly surprising slip-up on Apple’s part, a helpful security how-to, and an update on a persistent foe — that’s what we’re diving into this week as we tour the headlines and pluck out the security stories that seem most ripe for an interesting discussion. On today’s list, we’re checking off the following stories:

A bypass in Apple’s hours-old update
Scammy subscriptions, and how to stop them
And GrayKey is getting stuck in the lock

This week, we’re starting off with a pretty unique story. When Apple releases a new update, the …

November 1, 2018 • 13 min read
The release of iOS 12 Brings Both Security Improvements and Bug Fixes

The release of iOS 12 Brings Both Security Improvements and Bug Fixes

The latest major version of Apple’s flagship mobile operating has been released, along with a group of updates shared among iOS and many other products, include macOS Mojave and watchOS. As a significant milestone, iOS 12 consists of a variety of hardened security improvements alongside various fixes for many different vulnerabilities and bugs. From making good security easier for users, to locking down loopholes, there’s a lot to unpack in iOS 12.

First up: the latest improvements to the operating system itself. With two-factor authentication more important for user …

October 4, 2018 • 3 min read
Apple’s July Security Updates Correct a Host of Problems

Apple’s July Security Updates Correct a Host of Problems

It’s that time again: Apple has pushed out a variety of updates for practically all its products, from iTunes for Windows to multiple flavors of macOS, plus the latest version of iOS 11.4. New security updates are also available for iCloud for Windows, Safari, watchOS, and tvOS. What should you know about these updates?

First, iOS 11.4.1 finally includes the much-discussed USB Restricted Mode, a new security feature that aims at making it more difficult for law enforcement agencies and others from using phone-cracking devices to break past a …

July 18, 2018 • 2 min read
Researcher Discloses Potential Brute Force Attack on iPhone; Apple Says It’s Not Real

Researcher Discloses Potential Brute Force Attack on iPhone; Apple Says It’s Not Real

A strong passcode is one of the most important elements of personal security on iOS devices. While it has been some time since Apple introduced the stronger six-digit passcodes (which they now recommend), many people continue to use the four-digit PIN. According to one recent report by a security researcher, the iPhone could be vulnerable to an extremely simple brute force attack which would render those four digits useless. However, Apple has since taken the public stance that the vulnerability as described does not exist. What’s going on here?

July 3, 2018 • 2 min read

Latest Round of Apple Security Updates Includes iOS 11.3

Latest Round of Apple Security Updates Includes iOS 11.3

After more than a month since the last big “patch day” for Apple products, the Cupertino company has now released to the public a new slew of updates that bring with them both new features and enhanced security. Covering everything from a new and essential update to iOS to important bug fixes in macOS, watchOS, and even Apple’s Xcode, these patches slam shut several open doors hackers might use to wreak havoc. Overall, these patches contain more than 90 fixes. Here’s a quick breakdown of what you can expect when …

April 9, 2018 • 2 min read
Apple Patches Yet Another Phone-Crashing Text Bug

Apple Patches Yet Another Phone-Crashing Text Bug

We’ve recently seen a series of bugs on iOS and macOS devices that all follow a similar pattern: maliciously-formed links or simple emojis and text strings that cause the device to lock up and crash, sometimes repeatedly. A number of these issues have been fixed over the lifespan of the iPhone, but the past few months has seen a spike in the number of issues in this class requiring patches from Apple to fix. One of the most notable bugs from last year was a bug in the Messages app …

February 26, 2018 • 2 min read
iPhone Source Code Leak Could Open the Floodgates for Hackers

iPhone Source Code Leak Could Open the Floodgates for Hackers

A key piece of Apple’s iPhone source code may be out in the wild.

On February 7, someone posted something called “iBoot” on GitHub. GitHub is a popular site for sharing computer code. This time, though, it appears the code in question was not the user’s to share. Instead, “iBoot” is said to be the source code for a crucial iPhone boot process. The leak has the potential to jeopardize the security of the iPhone going forward.

According to a report on the leak from Motherboard, iBoot is the …

February 20, 2018 • 3 min read
The Checklist 74: Overall iOS Security Features

The Checklist 74: Overall iOS Security Features

Your iPhone is secure, right? That’s the general impression, anyway — and it’s certainly an impression Apple has worked hard to maintain over the years. It’s easy enough to call it secure, but what is in place to keep you safe? What does Apple do to protect its users day after day, and do we ever need to go beyond the “out of box” security experience? On today’s edition of The Checklist, we’re talking about the overall security features you’ll find in iOS, whether you’re an iPhone or an iPad user

February 1, 2018 • 17 min read
Checklist 70: Apple’s No Good Very Bad Security Quarter

Checklist 70: Apple’s No Good Very Bad Security Quarter

For more than a year, we’ve been taking a little time every week here at The Checklist to bring you a podcast focused on and around the security of the Mac, iOS devices, and the Apple platform in general. We all know that was silly, though — after all, there aren’t any major security problems with Apple, right?

There is no such thing as 100% safe & secure, although it has indeed been the case that Apple systems experience fewer major vulnerabilities and problems than their counterparts, generally speaking. …

January 4, 2018 • 13 min read
Apple Patches Potentially Serious Vulnerability in HomeKit with iOS 11.2.1

Apple Patches Potentially Serious Vulnerability in HomeKit with iOS 11.2.1

In a world filled with “Internet of Things” (IoT) devices, there are security holes everywhere. Apple works hard on the hardened nature of its HomeKit system and the way these third-party devices interface with Apple products. So when news broke in early December that someone had uncovered a zero-day exploit that could allow an attacker to take control of a user’s devices through the Home app, it made headlines across the web.

Though the exact details of the exploit were not released publicly and were described as tough to replicate, this …

December 20, 2017 • 2 min read
Quick Tweaks to Improve Your Privacy on iOS 11

Quick Tweaks to Improve Your Privacy on iOS 11

iOS 11 has been out for a few months now, and Apple’s latest flagship iPhone versions have also launched in its wake. By now, you should hopefully have made the upgrade to this newer software platform. Whether you’re just upgrading now, or you’ve been getting comfortable with iOS 11 for a few months now, you’ll find that iOS 11 puts plenty of tools within your reach to improve your device’s security and privacy. Here’s what you can do to make your device even safer.

December 9, 2017 • 3 min read
5 Handy “Hacks” to Get More Functionality Out of Your iPhone

5 Handy “Hacks” to Get More Functionality Out of Your iPhone

Not every “hack” is a bad thing — in the true sense of the word, a “hack” means a clever and ingenious method for accomplishing something. You might know this from popular articles about “lifehacks.” Did you know that your iPhone has all kinds of built-in functionality that Apple doesn’t always advertise directly? Try out some of these handy “hacks” on your phone to see what you can accomplish.

December 6, 2017 • 3 min read