iPhone Security

iPhone Security Researcher

[iPhone Security @iphonesecurity]

Serious Wi-fi sync vulnerability in #things from @culturedcode: http://tinyurl.com/lryma8 Don't sync until a bugfix is available!

[iPhone Security @iphonesecurity]

There's a serious wi-fi vulnerability in #Things: http://tinyurl.com/lryma8 Many Things users have obviously no understanding of security.

[iPhone Security @iphonesecurity]

@jtth OK, so don't use Things Touch sync at Starbucks, in the university library, etc. And make sure you're alone in your trusted network.

[iPhone Security @iphonesecurity]

@hackertweets Anyway, @culturedcode should issue a warning. Encrypted connections should be standard, not neglected security.

[iPhone Security @iphonesecurity]

@hackertweets Yeah, so Things Touch is useless if you work at Starbucks or in the university library. Great!

[iPhone Security @iphonesecurity]

@GothAlice Wi-fi encryption doesn't help either in a multi-user wi-fi network since all users use the same encryption key.

[iPhone Security @iphonesecurity]

@GothAlice MAC control is not a wi-fi security feature since MAC addresses are broadcasted without encryption. Easy to sniff, easy to fake!

[iPhone Security @iphonesecurity]

@matthew_nl Sorry, I don't know. Ask them!

[iPhone Security @iphonesecurity]

@XeZaR Even worse: Things Touch always tries to sync, so you have to manually deactivate sync before joining a public wi-fi network.

[iPhone Security @iphonesecurity]

@XeZaR Public wi-fi networks are usually not encrypted and you're rarely alone in a wi-fi network anyway.

[iPhone Security @iphonesecurity]

@XeZaR Encrypted wi-fi does only help if there're only trustworthy users in the particular network since all users share the same key.

[iPhone Security @iphonesecurity]

@danielliu BTW: Not my article, thanks to the author and the translator. I found the article via Things' online forums.

[iPhone Security @iphonesecurity]

@danielliu An extra ad-hoc wi-fi network only for you and your Things sync? Encryption provided by Things would be much more convenient!

[iPhone Security @iphonesecurity]

OK, no more #things and @culturedcode tweets today, I'll cover another unsafe iPhone app on Monday, stay tuned! :) Enjoy you weekend!

[iPhone Security @iphonesecurity]

@marketeasy They've promised a lot, including security. Be patient and hope for a miracle! http://tinyurl.com/lryma8 #things #security

[iPhone Security @iphonesecurity]

@twillj Why don't they discuss about safe wi-fi syncing with encryption??? http://tinyurl.com/lryma8 #things #security

[iPhone Security @iphonesecurity]

@Colby There's no encryption for Things wi-fi sync, so you can use multiple computers right now! :-) http://tinyurl.com/lryma8 #things

[iPhone Security @iphonesecurity]

@betamonk How do you like their amazing wi-fi sync without encryption? http://tinyurl.com/lryma8 #things #security

[iPhone Security @iphonesecurity]

@kevinm33 Even worse: Things is not secury, wi-fi sync without encryption! http://tinyurl.com/lryma8 #things #security

[iPhone Security @iphonesecurity]

@kirkstrobeck Yeah, Things sync via wi-fi without encryption is definitely worth the price! ;-) http://tinyurl.com/lryma8 #things #security