Skip to main content

Have you ever reconsidered your personal iPhone security policy?

Why should I reconsider my iPhone security policy? I have my iPhone four digit pass code and Find my iPhone feature feature is activated. So how should abuse be possible? What could a thief be doing with my stolen iPhone? Well, possibly quite a lot. At least the bold print bullets in this article should be mandatory for everyone. Of course this is no guarantee for invulnerability but it will improve your security. After watching this video you should consider the following actions:
  • Change your Apple ID rescue mail address and do not add this mail account to your iPhone.
  • Consider to use a proper and usable password policy for your Apple ID like this or this (German article).
  • Consider a complex pass code for your iPhone. As you can see in the video four digit pass codes can be hacked in no time on iPhone 4. For newer iPhone a leak is not yet known but it is properly there. Definitely do not use these pass codes.
  • Alternative to point three: activate delete iPhone after 10 wrong attempts (Go to Settings > Passcode Lock > Enter Your Passcode > Click on Done > Erase Data = ON > Enable). This feature can be very annoying when friends playing with your phone at a party ("Haha, I erased your iPhone!").
  • Deactivate control center when iPhone is locked. I agree that it's a little uncomfortable.
  • There is a long still ongoing discussion about the pros and cons of Apple's Touch ID which is build in the iPhone 5S. No matter what it is definitely more secure than any 4 digit pass code.
After reading this (German article) you should consider the following:
  • Upgrade to iOS 7 if not already done.
  • Reinstall your apps after upgrading to enable data protection, at least apps with sensitive data. Otherwise third party app data might be there in plain text. (Just updating the app under iOS 7 will not activate data protection, you need to reinstall the apps).
After seeing this video (iPhone part starts at 44:30) you might consider to
  • Do not to use mobile phones at all. Maybe not an option for most of us.
  • Block your phone camera (at least your front cam) with a sticker. There is no evidence yet, that somebody can access it but it does not hurt to cover it. And we already saw this issues on PC's and notebooks here and here.
After reading this (German article) you might consider to

Popular posts from this blog

How to get started with Windows Server AppFabric easily

In my opinion it is really hard to get started with Windows Server AppFabric. There is good material, but it is shuffled around in different sources. A good intro can you find here: this all-in-one intro by Scott Hanslmann  this caching intro by Wade Wegener  Additional helpful resources are Microsoft's Introduction Part 1 and Microsoft's Introduction Part 2 by Jon Flanders  Pluralsight's Hosting Fundamentals   Pluralsight's Caching Introduction   Microsoft's Caching Documentation   Good books are Microsoft Windows Server AppFabric Cookbook   and Pro Windows Server: AppFabric Please also watch out for software updates, currently there is CU 4 . To keep yourself updated subscribe to Distributed Services News Feed . Updated my list on 11.03.2014 with one more Download the Windows Server AppFabric Samples

How to fix Windows Server AppFabric Dashboard on Windows Server 2012 / Windows 8

Windows Server AppFabric is a great enhancement for IIS and its caching capabilities are great for .NET applications. But currently there is a very annoying bug regarding its monitoring UI, so called “Dashboard”. Especially for me as a non WF guy (I am actually just working with WCF) it was really hard to figure it out. Hence, many thanks to Gianluca from Distributed Services at Microsoft! Windows Server AppFabric Dashboard does not work on Windows Server 2012 / Windows 8. You will receive this error message "Unable to cast object of type 'System.Management.Automation.PSCustomObject' to type 'Microsoft.ApplicationServer.Management.Data.GroupByInfo'." This error will cause that you cannot see any request statistics neither WF nor for WCF: The reason is, I quote Microsoft here: "[...] the root cause is a powershell script embedded in AF code that returns different results when ran on Windows 2012. This script is about statistics for Idle & per...

How to delete Azure Active-Directories

When I was trying to delete an Azure Active-irectory by using the management portal I have received the error message “Directory contains one or more applications that were added by a user or administrator” and I was really confused. Then I found out this is a common issue. The solution was even more confusing, some PowerShell cmdlets are needed. Unfortunately I was not able to proceed, it was not possible to login with my Microsoft-ID to execute the needed commands. Here I found out I have to install the correct version of the tools. These are located here .