0

I recently ran a security scan on one of my iOS apps that suggested I modify my apps display as it enters the background so that the screenshot stored in the cache does not expose any sensitive data. I'm currently using apple's data protection library to encrypt all my apps data including the cached screenshot whenever the phone is locked using the user's pin. Is there any reason to modify the display under these circumstances?

Edit: Additional information

  • The screenshot is currently used to hide the apps small reload time so I'd like to keep it if it's not necessary to blur it out or remove it.
  • This is an internal enterprise app that can only be used on devices with 8 digit device pins.
  • We display data from the phones native calendar that may contain sensitive information
  • Does you app have it's own PIN? Or do you rely on the iOS lock screen? – paj28 Apr 19 '16 at 8:46
  • Do you actually display sensitive information in the app? Then blurring or putting a default view in front would be useful. – Tobi Nary Apr 19 '16 at 8:48
  • @paj28 I rely on the iOS lock screen but this is an internal enterprise app that will be running alongside security software that enforces all our users create an eight digit device pin. – Declan McKenna Apr 19 '16 at 8:52
  • 1
    I think blurring is unnecessary. You need it when an app has its own PIN, but if the whole device is locked, you can't see the screenshot, so you're safe. – paj28 Apr 19 '16 at 8:56
  • 1
    @Deco - no. If malware can do that, it can just nick the data directly. – paj28 Apr 20 '16 at 13:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.