HACKINTOSH.ORG | Macintosh discussion forums

Researcher expresses concerns over iOS 12’s new security code auto-fill feature

<div class="feat-image">(https://9to5mac.files.wordpress.com/2018/06/safari-security-auto-fill.jpg?quality=82&strip=all&w=1600)</div><p><strong>Update</strong>: Will Strafach has some doubts about Gutmann’s thoughts:</p>
<div class="embed-twitter">
<blockquote class="twitter-tweet"  data-dnt="true">
<p lang="en" dir="ltr">respectfully, the author of this post does not fully understand the feature. they are incorrect.</p>
<p>would be happy to be proven wrong with a PoC of some new vuln I do not know about though. https://t.co/twDi2CdaBl (https://t.co/twDi2CdaBl)</p>
<p>&mdash; Will Strafach (@chronic) July 4, 2018 (https://twitter.com/chronic/status/1014304649233477632?ref_src=twsrc%5Etfw)</p>
<p><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></div>
<p>With iOS 12 and macOS Mojave, Apple has introduced a new security code auto-fill feature (https://9to5mac.com/2018/06/04/safari-security-code-auto-fill/) that makes managing two-factor authentication codes sent via SMS easier to manage. A security researcher, however, has published a new piece detailing some potential fraud concerns with the feature..</p>
<p> <a href="https://9to5mac.com/2018/07/02/security-code-auto-fill-concerns/#more-540979" class="more-link">more…[/url]</p><div class="feedflare">
<img src="http://feeds.feedburner.com/~ff/9To5Mac-MacAllDay?i=TAdp60miuV8:iPGDKtKEmz8:D7DqB2pKExk" border="0"></img> (http://feeds.feedburner.com/~ff/9To5Mac-MacAllDay?a=TAdp60miuV8:iPGDKtKEmz8:D7DqB2pKExk)
</div><img src="http://feeds.feedburner.com/~r/9To5Mac-MacAllDay/~4/TAdp60miuV8" height="1" width="1" alt=""/>

Source: Researcher expresses concerns over iOS 12’s new security code auto-fill feature (http://feedproxy.google.com/~r/9To5Mac-MacAllDay/~3/TAdp60miuV8/)