Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options questions only not deleted user 396

iOS is Apple's operating system for the iPhone, iPad and iPod Touch.

3 votes
1 answer
186 views

Is SCEP safe if I use a different long and complex password per enrollment, and validate it ...

The iOS configuration profile allows me to configure a different password for each device. …
4 votes
1 answer
464 views

How does choosing where a password is stored affect non-repudiation? (or private key storage)

Password managers, and numerous tools have been created to store end-user secrets over the years. This proliferation has resulted in a hazy mix of opportunities to improve security. In short, I thin …
1 vote
0 answers
1k views

How is the Apple FairPlay Server Playback Context (SPC) message generated?

Given that FairPlay only works on iOS and certain Mac hardware, I suspect there is some interaction between the FairPlay AV Foundation and the Secure Element Question When the SPC is given to the server …
2 votes
1 answer
2k views

What is the security benefit of using PostMessage instead of a callback URL in OAuth/OIDC?

Of all the issuers I've found, (Facebook, Twitter, Azure AD, etc) only Apple's CloudKit has the feature of "post message" as a callback (unless it's buried in the other's SDK) Here is a screenshot of …
6 votes
1 answer
2k views

Can more than one app claim a URL in Universal Links / App Links? What happens?

Is the experience the same on Android and iOS? Will there be a prompt, allowing the user to pick which app to open the deep link URL in? …
3 votes
1 answer
1k views

What happens to data in the Secure Element when a device is Jailbroken?

I want to store a key in the SecureElement within a non-Jailbroken device. What happens when a device is Jailbroken? Knowing that the private key can't be extracted, can the key be used to sign or en …
0 votes
1 answer
107 views

How would "hardware verified" API calls be constructed?

Taking this a step further, if apps in the AppStore can be considered to be a controlled "extension" to base iOS, then I would think that 3rd party users would be able to construct similarly signed APIs … The result is that their endpoints can verify that it was their signed application, on an iOS device, that caused the API call to occur. No more spoofing. …
6 votes
1 answer
218 views

What tools are needed to view or detect covert messages in a 60 fps video?

The eye can't detect changes in a frame greater than 60 FPS. Similar to this scene in Fight Club, a QR code equivalent is used in pairing the Apple Watch with the iPhone Without knowing that the iWat …
2 votes
2 answers
460 views

How would iOS or Android app "firewall" for extended permissions (location, etc) work?

The answer I'm interested in will refer to iOS and Android Operating System details, and not a simple security on/off switch available in Settings. … What layer in the Android and iOS operating system is most suited to blocking or controlling permission access at runtime? …
2 votes
0 answers
158 views

Under what conditions does Safari have access to the Keychain?

secrets to be copied from their OSX computer to iOS. … I haven't yet been able to figure out how an iOS app can get access to all passwords on a device, but I do see that Safari mobile has the ability to share passwords with the Safari desktop. …
4 votes
3 answers
3k views

How is "Touch Jacking" prevented on iOS, Android, and Win 10 - touch?

I'm looking at the security of both iOS and Android from a Touch-jacking security perspective. … Does the architecture of iOS allow for such security? Does the architecture of Android allow for such security? Does the architecture of Windows Mobile (Windows 10) allow for such security? …
5 votes
4 answers
2k views

Are kiosk-style, full screen apps possible on iOS, Android, or Windows phone?

Question Can any mobile phone (iOS, Android, or Windows) support an app taking "full screen" control and not exiting until a password is entered? If such a solution is possible, is it secure? …
6 votes
2 answers
14k views

How effective is the iOS "Send All Traffic to VPN" setting at deterring Wifi-based attacks?

iOS version 5 and newer has a setting for VPNs to "Send All Traffic" over that VPN. …
7 votes
4 answers
2k views

How effective is iPhone 3GS and 4 device-at-rest encryption?

My primary goal is to protect Activesync-based communication from being copied or stolen from an offline device. In that context how effective is iPhone 3GS and 4 encryption?
2 votes
1 answer
5k views

How does Activesync security policy affect the usage of the iOS fingerprint scanner?

An Activesync IT administrator has the ability to choose if the phone should require a password, and also how complex it should be. Since the fingerprint scanner appears to replace the traditional pa …

15 30 50 per page