iPhone Risk of unencrypted data

Discussion in 'Jailbreaks and iOS Hacks' started by expergo, Nov 22, 2013.

  1. expergo macrumors regular

    Joined:
    Nov 21, 2004
    #1
    Hello,

    I'm doing some research on MDM solutions and wanted to identify the risk of unencrypted data on iOS 7.

    I know that the data on the iPhone is encrypted with a passcode (e.g. mail). But if you open a mail attachment into a 3rd party app (e.g. dropbox or quickoffice), that file then becomes unencrypted.

    So if a phone is stolen, is it as simple as someone plugging the device into their computer, running some simple hack software, and it'll give them access to all unencrypted data (i.e. the email attachment)?

    Any help appreciated. Can't seem to find that much on the net and the question of not just whether it's possible to get that data, but how easy it is to get, is not easy to answer. The ease of retrieving that data determines the level of risk of having that unencrypted data.

    Thanks!
     
  2. darricksailo macrumors 601

    darricksailo

    Joined:
    Dec 18, 2012
    #2
    If its not easy to find out how from the internet, you won't have to worry for the most part as its not common knowledge
     
  3. Applejuiced macrumors Westmere

    Applejuiced

    Joined:
    Apr 16, 2008
    Location:
    At the iPhone hacks section.
    #3
    What unencrypted data?
    If you don't have a passcode setup then anyone can view everything that's on your phone.
    They don't need to go to your mail app and open any attachments.
     
  4. expergo thread starter macrumors regular

    Joined:
    Nov 21, 2004
    #4
    In a way, you're right. But I just wanted something more substantive to provide to management. If I knew the level of difficulty, at least there's a use case to say it takes x amount of work to access that data as opposed to "I couldn't seem to find instructions so it's probably not that easy".

    If you set a passcode it encrypts some of your data (e.g. your mail). So if you lost the phone, even if someone could take the data off the phone, they wouldn't be able to read it. BUT the data in 3rd party apps isn't encrypted, so I'm wondering how easy it is for someone to access that data (or grab it off the phone).
     
  5. darricksailo macrumors 601

    darricksailo

    Joined:
    Dec 18, 2012
    #5
    for the x amount of work required to access the data, you might fair better by actually asking hackers, who have experience with breaking security?
     
  6. tateu macrumors 6502

    Joined:
    Jan 27, 2012
    #6
    All data stored on an iOS device is encrypted and cannot be decrypted without decryption keys. Those keys are very hard, and in cases of non-jailbroken devices newer than the iPhone 4, impossible (as far as anyone knows) to get.

    Elcomsoft sells software, for $1495 US, that can aid in decrypting some iOS devices. According to their own website, they cannot decrypt non-jailbroken iPhones newer than the iPhone 4:
     
  7. expergo thread starter macrumors regular

    Joined:
    Nov 21, 2004
    #7
    Hi Tateu,

    I've read that only the Apple apps are encrypted (and not ALL data). There's an API that 3rd party apps can use to encrypt their data (e.g. Goodreader does it and you can enable this), but most do not. So if I opened an email attachment in a 3rd party app like Dropbox or Quickoffice, that file in that app is not encrypted. That's my understanding of it but I could be wrong.
     
  8. expergo thread starter macrumors regular

    Joined:
    Nov 21, 2004
    #8
  9. tateu macrumors 6502

    Joined:
    Jan 27, 2012
    #9
    That is incorrect. Everything written to the drive is encrypted but there are different levels, based on whether or not the app developer implements specific iOS encryption APIs. Those levels are described in the following document from Apple, page 10:
    When you plug a locked iOS device into a computer that it has never been connected to before, you cannot access any data on the device unless you unlock the device by typing in the passcode.

    And according to Elcomsoft, they cannot get any data from an iPhone 4s or newer unless it is jailbroken.

    ----------

    That was true in iOS 6, too. I'm not sure about iOS 5, though, but I think it was true then, too.
     
  10. darricksailo macrumors 601

    darricksailo

    Joined:
    Dec 18, 2012
    #10
    The only exception is photos in the camera roll. You'll be able to access that the second you connect it to a computer via USB
     

Share This Page