{"id":2431,"date":"2013-05-31T12:28:07","date_gmt":"2013-05-31T16:28:07","guid":{"rendered":"http:\/\/blog.nccomputertech.com\/?p=2431"},"modified":"2013-05-31T12:28:07","modified_gmt":"2013-05-31T16:28:07","slug":"apples-two-factor-authentication-doesnt-protect-icloud-data","status":"publish","type":"post","link":"https:\/\/nccomputertech.com\/techtalk\/2013\/05\/31\/apples-two-factor-authentication-doesnt-protect-icloud-data\/","title":{"rendered":"Apple's two-factor authentication doesn't protect iCloud data"},"content":{"rendered":"

Apple implemented an optional two-factor authentication for Apple IDs back in March in an effort to provide users with tighter security over their account but according to one security software company, Cupertino isn\u2019t doing enough.
\nElcomSoft noted in a recent blog post that Apple\u2019s optional security measures do work under certain circumstances. For instance, those using two-factor authentication should still be protected from someone signing into their account to make changes, purchasing items from iTunes, the App Store or iBookstore and receiving Apple ID-related tech support.<\/p>\n

\"\"<\/a><\/p>\n

The problem, according to ElcomSoft, is that two-factor authentication does nothing to protect a user\u2019s iOS backups and iCloud data. That means that if a hacker could manage to obtain a user\u2019s Apple ID and password, they could log into the account and download all of the information the user has saved in the cloud, regardless of whether two-factor authentication is enabled or not.<\/p>\n

\"\"<\/a><\/p>\n

If that weren\u2019t enough, ElcomSoft discovered that verification codes sent to a trusted handset are delivered and displayed right on the user\u2019s lock screen (assuming the \u201cshow subject field\u201d is enabled in the Messaging settings). This means that someone with your Apple ID and password wouldn\u2019t even need your handset\u2019s passcode to thwart the two-factor authentication.
\nAt the end of the day, ElcomSoft said the system is just not as secure as one would expect it to be and that Apple\u2019s two-factor authentication does not look like a finished product.
\nvia Apple’s two-factor authentication doesn’t protect iCloud data – TechSpot<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Apple implemented an optional two-factor authentication for Apple IDs back in March in an effort to provide users with tighter […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[2,7],"tags":[455,500,549,797,1111],"class_list":["post-2431","post","type-post","status-publish","format-standard","hentry","category-apple","category-security","tag-hacking","tag-icloud","tag-ios","tag-passwords","tag-two-factor-authentication"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/papNkV-Dd","jetpack-related-posts":[{"id":6722,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/10\/28\/two-factor-authentication-will-come-baked-into-windows-10\/","url_meta":{"origin":2431,"position":0},"title":"Two-factor authentication will come baked into Windows 10","author":"NCCT","date":"October 28, 2014","format":false,"excerpt":"Nary a day goes by that we don\u2019t hear about a new security breach in which million of credit cards or passwords are stolen. With Windows 10, Microsoft is addressing modern security threats during its development in hopes of offering a secure product that consumers will feel safe using. Part\u2026","rel":"","context":"In "Microsoft"","block_context":{"text":"Microsoft","link":"https:\/\/nccomputertech.com\/techtalk\/category\/microsoft\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":6466,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/09\/24\/apple-releases-icloud-drive-for-windows-mac-users-have-to-wait-until-yosemite-is-out\/","url_meta":{"origin":2431,"position":1},"title":"Apple releases iCloud Drive for Windows, Mac users have to wait until Yosemite is out","author":"NCCT","date":"September 24, 2014","format":false,"excerpt":"Apple started rolling a revamped version of iCloud this week with the arrival of iOS 8. Dubbed iCloud Drive, the cloud storage service is now more akin to Dropbox and Google Drive in that you can actually access and store stuff through a file system. But while iPhone users who\u2026","rel":"","context":"In "Apple"","block_context":{"text":"Apple","link":"https:\/\/nccomputertech.com\/techtalk\/category\/apple\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":5757,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/06\/13\/dailytech-apple-reveals-os-x-yosemite-gives-it-a-fresh-coat-of-paint\/","url_meta":{"origin":2431,"position":2},"title":"DailyTech – Apple Reveals OS X “Yosemite”, Gives it a Fresh Coat of Paint","author":"NCCT","date":"June 13, 2014","format":false,"excerpt":"Apple's PC operating system gets an iOS 7-style makeover OS X is Apple\u2019s premiere desktop operating system, and it\u2019s getting a big update with OS X 10.10 \u201cYosemite\u201d. The \u201cflat\u201d user interface that was first introduced with iOS 7 has been deftly transferred to OS X. So for people that\u2026","rel":"","context":"In "Apple"","block_context":{"text":"Apple","link":"https:\/\/nccomputertech.com\/techtalk\/category\/apple\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":7078,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/12\/11\/fido-the-protocol-behind-googles-security-key-expected-to-lead-the-anti-password-push\/","url_meta":{"origin":2431,"position":3},"title":"FIDO, the protocol behind Google’s Security Key, expected to lead the anti-password push","author":"NCCT","date":"December 11, 2014","format":false,"excerpt":"Fast Identification Online, or FIDO for short, is the key protocol behind the Google Security Key USB drive announced in October. That device was part of a two-factor authentication system that assisted in verifying an identity when logging into Gmail, Chrome or any other Google account. The group responsible for\u2026","rel":"","context":"In "Security"","block_context":{"text":"Security","link":"https:\/\/nccomputertech.com\/techtalk\/category\/security\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":8943,"url":"https:\/\/nccomputertech.com\/techtalk\/2016\/06\/10\/twitter-is-notifying-affected-users-after-millions-of-login-details-leaked\/","url_meta":{"origin":2431,"position":4},"title":"Twitter is notifying affected users after millions of login details leaked","author":"NCCT","date":"June 10, 2016","format":false,"excerpt":"By Ian Paul | PCWorld Users worried about being caught up in the recent leak of more than 32 million Twitter login credentials should already know if they\u2019ve been hacked. Twitter confirmed on Friday that it was notifying users whose valid login credentials were recently being passed around on the\u2026","rel":"","context":"In "Security"","block_context":{"text":"Security","link":"https:\/\/nccomputertech.com\/techtalk\/category\/security\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":7685,"url":"https:\/\/nccomputertech.com\/techtalk\/2015\/02\/27\/hackers-impersonating-it-staff-popular-tactic-in-data-breaches-fireeye-finds\/","url_meta":{"origin":2431,"position":5},"title":"Hackers impersonating IT staff popular tactic in data breaches, FireEye finds","author":"NCCT","date":"February 27, 2015","format":false,"excerpt":"Fresh FireEye research suggests that today's cyberattackers are becoming smarter about the systems they seek to break, and are commonly using impersonation and social engineering to tap into the most common weakness in the security chain -- employees. Within FireEye's sixth annual M-trends report, which tracks the threat landscape and\u2026","rel":"","context":"In "Security"","block_context":{"text":"Security","link":"https:\/\/nccomputertech.com\/techtalk\/category\/security\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts\/2431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/comments?post=2431"}],"version-history":[{"count":0,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts\/2431\/revisions"}],"wp:attachment":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/media?parent=2431"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/categories?post=2431"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/tags?post=2431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}