Skip to content

#days Security & Risk Conference: Nicolas Seriot

Apple iOS 4 Privacy

HardwareDEFCON Switzerland45 minAdvancedOpen on YouTube ↗

Apple iOS 4 Privacy explores #days Security & Risk Conference: Nicolas Seriot.

Summary

Nicolas Seriot demonstrates how App Store apps can harvest personal data without private APIs, including phone number, address book, email settings, keyboard cache, call history, Safari searches, and location via WiFi or cell caches. Discusses App Store review bypass techniques and argues for improved sandboxing and applicative firewall-style user controls.

Related talks