May 4, 2014

Apple Removed Encryption Protection for Email Attachments, Researcher Says

via truthdig:


The tech giant withheld safeguards from parties seeking access to users’ email attachments in the latest versions of its operating system for the iPad and iPhone, contrary to claims made on its website, an independent security research firm based in Germany reports.

NESO Labs CEO Andreas Kurtz explained in an April 23 blog post that Apple’s still visible statement that data protection “provides an additional layer of protection for email messages attachments” for “iPhone 3GS and later, all iPad models, and iPod touch (3rd generation and later)” was determined false by an inspection he performed. Kurtz was able to access all email attachments without encryption or restriction, using “well-known techniques,” he wrote on his blog.

Kurtz told Apple of the issue and went public when it failed to commit to fixing it. SCMagazineUK.com reports that he told the publication via email: “My repeated queries were responded with default replies only, stating either that they were aware of that issue or that they were still investigating this issue, up to today. As iOS 7.1.1 was released without fixing this bug, I decided to disclose details on it.” ................(more)

The complete piece is at: http://www.truthdig.com/eartotheground/item/apple_quietly_removes_encryption_protection_for_email_attachments_20140503