Categories: Mobile

iPhone security can be breached in less than 6 minutes – Fraunhofer Institute

German sercurity firm Fraunhofer has found a way to gain access to passwords held on iPhones and iPads in about the same length of time it takes to make a proper cup of coffee.

Fraunhofer tech experts were able to gain access to a pin-locked iPhone and download password information from the device’s apps and browsers. Accessing the information involved jail-breaking the phone which allowed the security experts to install any applications they wished. The download the information Fraunhofer experts wrote a script that searched for and displayed user login information once installed.

While potential hackers need direct access to the phone the experts warned that “the overall approach only takes six minutes, which might provide an [ideal] opportunity for an attacker to return the device to the owner to cover the revealing of passwords.”

Download detailed information from the Fraunhofer Institute on how they breached iPhone security (PDF | 92KB)

Many people think that the Smartphone device encryption will provide sufficient security. “This opinion we encountered even in companies’ security departments”, says Jens Heider, technical manager of the Fraunhofer SIT security test lab. “Our demonstration proves that this is a false assumption. We were able to crack devices with high security settings within a very short time.” The testers did not have to break the 256 bit encryption to get to the passwords stored in the devices’ keychain. A weakness in the security design was used: The underlying secret the attacked password’s encryption is based on is stored in the device’s operating system. This means that the encryption is independent from the personal password, which is actually supposed to protect the access to the device.

The test was carried out on with an iPhone running iOS 4.2.1

Ajit Jain

Ajit Jain is marketing and sales head at Octal Info Solution, a leading iPhone app development company and offering platform to hire Android app developers for your own app development project. He is available to connect on Google Plus, Twitter, Facebook, and LinkedIn.

View Comments

Recent Posts

MWC 2025 Barcelona was the ultimate experiential marketing dream

Mobile World Congress (MWC) in Barcelona is the biggest annual event in the mobile technology…

2 days ago

GAN, Tec de Monterrey partnership highlights cross-border startup ecosystem building in Latin America amid trade dispute

Despite recent tensions between the United States government and Latin American countries over migration and…

6 days ago

This founder started out with US $5K to his name. Now, he owns a multi-million-dollar global business

Meet Nitin Seth, the Co-Founder and CEO of Screen Magic (SMS Magic), a messaging leader…

6 days ago

Building smarter: AI, the ultimate tool transforming an old-age industry

In this Brains Byte Back, we sit down with Hari Vasudevan, founder and CEO of…

6 days ago

When AI Goes Rogue: 8 Lessons from Implementing LLMs in the Healthcare Industry that Could Save the Future

By Santosh Shevade, Principal Data Consultant at Gramener – A Straive company All pharmaceutical companies…

1 week ago

Digital Public Infrastructure will enable public, private entities to control your access to essential goods, services & mobility

Digital Public Infrastructure is a top-down agenda coming from unelected globalists, bureaucrats, and their partners…

2 weeks ago