IOS Mail does not encrypt email attachments

IOS 7 Mail

A new appears security issue on iOS, the application Mail does not encrypt attached files que enviamos o recibimos en los correos electrónicos. Apple en su página dice todo lo contrario, que Mail para iOS es completamente seguro y proporciona un nivel de protección adicional para los documentos adjuntos de nuestros mensajes de correos electrónicos. El security researcher Andreas Kurtz has located this security issue, which is present in the latest versions of iOS 7, specifically from iOS 7.0.4 onwards, including the latest available version, iOS 7.1.1.

To arrive at this discovery, the researcher created an IMAP email account to which you included test emails to which you added attachments, restored an iPhone 4 to the latest versions of iOS, iOS 7.1 and iOS 7.1.1 and once this is done accessed the device using the methods DFU, DFU mode, custom ramdisk o SSH over usbmux and found that they were visible. Lastly, he mounted the iOS data partition image, accessed the email data, and to his and everyone's surprise, there there were all the attachments of the test email without any encryption. The image shows proof of a PDF file attached by Andreas Kurtz that is not encrypted.

Unencrypted mail

The problem does not stop there, Andreas Kurtz himself contacted Apple to notify them of the problem and they replied that they were aware of it but that they could not need more information on when they would solve this security problem. This solution would come from the hand of a software update, In which perhaps Cupertino will work or have it ready, possibly in a few days we will see a new version of iOS 7.1.2 that as a novelty will bring the solution to these security problems. Even so, it should be clear that iOS is a very secure operating system and this small problem will be quickly covered and faster now that it is already general knowledge, but the latest bugs detected in iOS may make many users doubt its security.

What do you think of these bugs detected lately? Do they lower your confidence in iOS?


You are interested in:
According to Apple, it is the most effective company in the world in security
Follow us on Google News

Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: AB Internet Networks 2008 SL
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.

  1.   BhEaN said

    Finish the article with - "it should still be clear that iOS is a very secure operating system and this little problem will be quickly covered" - it is embarrassing, really ... totally unnecessary ...

  2.   Sherlock said

    I think that Apple is launched into an endless race, they have set the bar very high and must be exceeded each time to continue selling, they need every 3 or 4 months to update products, make others obsolete, create new ones and thus make the wheel for its sole purpose : keep selling; and for this reason it is neglecting security (which only corrects when the bugs are in the public domain), the most popular were the geolocation files that they stored (and God knows what they will store now, they surely know more about us than we do). Anyway, it's the Apple world (Happy World)….

  3.   Jobs said

    The average apple user is not interested in the security of the operating system, he is interested in the security provided by showing off to others for overpaying.

    1.    BhEaN said

      What nonsense you just wrote ...
      It is totally true that most of the "average" Apple users are not interested in security, not because of what you have said, but because of the general ignorance of these users towards the more "internal" aspects of the technology. People who usually have Apple devices want things to work, period ... they don't care how. And that, although I do not share it, I respect it ...