Security weakness

Discussion in 'iOS 7' started by iambasil, Sep 21, 2013.

Most Liked Posts
  1. iambasil, Sep 21, 2013

    iambasil macrumors regular

    Joined:
    Jun 20, 2010
    Location:
    London, UK
    #1
    Not sure if this has been posted before (couldn't find) or even if it's new on iOS 7 - but I found it a bit of a worry:

    If I go to
    Settings>Safari>Passwords & Autofill>Saved Passwords
    it will show all the sites with passwords saved.

    By clicking any of these, it will show all the passwords in full, un starred and unencrypted.

    I'm not too happy with that! Surely they could require a password to enter that section or just not show the passwords at all? Or give us some sort of option for this not to be visible.

    If somebody got into my phone (and lots of people don't like having a password to unlock) they would very easily be able to get every password I have!

    I don't have fingerprint security Mr Cook - I'm on an iPhone 5.

    I'm putting some feedback for Apple:
    http://www.apple.com/feedback/iphone.html
     
    share
    + Quote Reply
  2. Gav2k, Sep 21, 2013

    Gav2k macrumors G3

    Gav2k

    Joined:
    Jul 24, 2009
    #2
    It's been posted a few times. Put a decent passcode on your phone!!!
     
    share
    + Quote Reply
  3. Techwing, Sep 21, 2013

    Techwing macrumors newbie

    Joined:
    Sep 19, 2013
    #3
    If you are storing passwords, anyone with access to your phone can use them directly to access the resources protected by them. This being so, requiring a password to see what they are doesn't contribute much security, given that they can actually use the passwords without giving any other password.
     
    share
    + Quote Reply
  4. iBueno, Sep 21, 2013

    iBueno macrumors member

    iBueno

    Joined:
    Feb 21, 2013
    Location:
    United Kingdom
    #4
    share
    + Quote Reply
  5. iambasil, Sep 21, 2013

    iambasil thread starter macrumors regular

    Joined:
    Jun 20, 2010
    Location:
    London, UK
    #5
    I can't believe how flawed that all is.
     
    share
    + Quote Reply
  6. Schtumple, Sep 21, 2013

    Schtumple macrumors 601

    Schtumple

    Joined:
    Jun 13, 2007
    Location:
    benkadams.com
    #6
    Ok, wow that's actually stupidly easy to get to. I'm surprised it's not locked out by an Apple ID password or something.
     
    share
    + Quote Reply
(You must log in or sign up to post here.)

Share This Page