Hacking iTunes backups is easier with iOS 10

ios-10-beta-actualidadiphone

According to the latest analysis, iOS 10 uses a new password verification system for the backup copies of our devices that we store in iTunes. However, it seems that this system is not safer because it is newer, on the contrary, it can represent a significant security breach for iOS users, who could see their iTunes backups "hacked" in an extremely easy way . Apparently, the classic way to exploit password barriers is much more effective with iOS 10, an old enemy of Apple that already cost him a dislike with that famous "celebgate" where the security of iCloud was questioned.

Ultimately, it is up to 2.500 times faster to constantly test passwords in iOS 10 backups than iTunes performs, which would significantly shorten cracking times. This is the report you have issued Elcomsoft, a company specialized in software designed by and to access iPhone data. 

For now, we have implemented a system that allows password capture only with the use of the PC / Mac CPU. The new security system is 2.500 times more accessible compared to the one used in the old backups of iOS 9, these are the comparisons

  • iOS 9 (CPU): 2,400 passwords per second (Intel i5)
  • iOS 9 (GPU): 150.000 passwords per second (NVIDIA GTX 1080)
  • iOS 10 (CPU): 6.000.000 passwords per second (Intel i5)

The difference is quite considerable. Meanwhile Apple seems to be working on an update for iOS 10 and macOS Sierra to fix this "problem." On the other hand, we recently received iOS 10.0.2 that solved some problems at the software level, and is that lately there is no version of iOS that is free of a significant number of bugs, despite the fact that this latest version seems to have been well tested. So, we expect an update in the coming weeks.


You are interested in:
According to Apple, it is the most effective company in the world in security
Follow us on Google News

Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: AB Internet Networks 2008 SL
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.