0

I don't have a device to test on, but I'm half-remembering from long ago that I can hook up a new (or found/stolen?) iPad and be offered the opportunity to do a backup on it.

If that is not the case, then the new Ventura feature that demands a passcode on the iPad is a useless inconvenience. But if it is the case, it fixes a serious security flaw.

Before, if the backup is not encrypted, then I could (and did) access any file on the iPad by getting into the backup.

Is my memory wrong? Or if the iPad never had a lock code set, is there still a risk?

There are suggestions of another question that does partially answer that it is/was a security problem. But "is X a security hole?" is not a duplicate of "How do I turn X off?" Also the other doesn't answer whether the vulnerability still exists when the iPad never had a security code set. Also, the CVE cited says that applications can get into the backup while I noted over a year ago that a human (me) can get into it. But I guess Finder, Terminal, and SQLite are all applications. (I used SQLite, but I could have used Finder or command line.)

13
  • The question is not a duplicate, but the answer does (partially) answer my question by linking to the description of the security issue. Surprising that it took them this long to find it.
    – WGroleau
    Nov 29, 2022 at 1:00
  • It is an iOS change, not Ventura. And it is a duplicate.
    – Gilby
    Nov 29, 2022 at 1:40
  • "is X a security hole?" is not a duplicate of "How do I turn X off?" And it started happening when I updated MacOS, NOT when I updated the other devices.
    – WGroleau
    Nov 29, 2022 at 2:12
  • 1
    Note that these backups can be taken only by a computer that has previously been trusted by the iPad (which would require entering the pass code, if one were set). I.e. if you have never connected this iPad to that particular computer before - it wouldn't be possible to transfer data without entering a pass code. Also note that an unencrypted backup only contains parts of the data stored on the iPhone - an encrypted backup is required to copy more sensitive data.
    – jksoegaard
    Nov 29, 2022 at 8:30
  • 1
    What the CVE is about is what happens with the backup when it is stored on your Mac. Remember that trusted Macs have this particular ability to create backups. In "the olden days" (i.e. before approx. 2018) - any file stored on your Mac is basically "free game" as long as you have got file system permissions to read it. That includes an unencrypted backup of an iOS devices. On newer systems, an extra layer of protection known as TCC is set in place. More specifically on recent systems, you wouldn't actually be able to just access the unencrypted backup without being able to authenticate [...]
    – jksoegaard
    Nov 29, 2022 at 8:33

0

Browse other questions tagged .