HACKINTOSH.ORG | Macintosh discussion forums

Tim Cook says Apple will bolster security alerts, broaden 2-step verification, increase awareness

<div class="field field-name-body field-type-text-with-summary field-label-hidden"><div class="field-items"><div class="field-item even" property="content:encoded"><p><a href='http://www.imore.com/tim-cook-says-apple-will-add-more-security-alerts-broaden-2-step-verification-increase-awareness' title="Tim Cook says Apple will bolster security alerts, broaden 2-step verification, increase awareness"><img src='http://www.imore.com/sites/imore.com/files/styles/large/public/field/image/2014/01/tim_cook_2013_ipad_event.jpg?itok=se1B3Rqd' />[/url]</p> <p>Following last weekend's celebrity photo data theft (http://www.imore.com/editors-desk-massive-celebrity-nude-photo-theft-journalistic-failure-and-what-you-need-know), Apple's CEO, <a href="http://www.imore.com/tim-cook" title="Tim Cook, Apple CEO">Tim Cook[/url] has spoken out about what can be done to better increase the security and protect the privacy of their customers. The steps include sending notifications for account changes, backup restores, and new device logins; broadening the deployment of two-step verification; and to ramp up efforts to educate customers about the dangers of social engineering and phishing attacks, and the importance of strong passwords. The latter of those steps was emphasized when Cook reaffirmed that iCloud servers hadn't been hacked, the individual accounts were hacked.<!--break--> The Wall Street Journal (http://online.wsj.com/articles/tim-cook-says-apple-to-add-security-alerts-for-icloud-users-1409880977):</p>

<p>When I step back from this terrible scenario that happened and say what more could we have done, I think about the awareness piece. I think we have a responsibility to ratchet that up. That's not really an engineering thing.</p> <p>We want to do everything we can do to protect our customers, because we are as outraged if not more so than they are.</p>

<p>While alerts don't help prevent attacks, they do help mitigate them. Customers receiving account notifications will be able to change passwords and even alert Apple's security team. That service should start rolling out in two weeks.</p> <p>Cook also emphasized what most of us already know — <a href="http://www.imore.com/touch-id" title="Touch ID fingerprint identity scanner, tips, problems, help, and how-to">Touch ID[/url], for example, never leaves the Apple A7 secure enclave and is never stored on iCloud or any server, so fingerprint data can't be compromised online. If, as rumored, Apple rolls out a new mobile payments feature alongside the <a href="http://www.imore.com/iphone-6" title="iPhone 6 news, rumors, and release date speculation">iPhone 6[/url] and <a href="http://www.imore.com/iwatch" title="iWatch news, rumors, and release date speculation">iWatch[/url], it's expected that will tie into a new secure enclave on the new Apple A8 system-on-a-chip.</p> <p>Apple has also informed developers that HealthKit (http://www.imore.com/health-iphone-ipad) data cannot be stored on iCloud, and any app trying to do so will be rejected from the App Store.</p> <p>Hopefully Apple will also replace "security questions" with something less susceptible to social engineering attacks. (Unless/until that happens, fill those fields with strong passwords as well, and store those passwords securely.)</p> <p>These are good next-steps from Apple, especially with the iPhone 6 event (http://www.imore.com/iphone-event) coming up in less than a week. Especially good having Tim Cook do it interview style rather than simply issuing another media advisory.</p> <p>What do you think of Tim Cook's response? Any other steps you'd like to see taken by Apple?</p> <p>Source: The Wall Street Journal (http://online.wsj.com/articles/tim-cook-says-apple-to-add-security-alerts-for-icloud-users-1409880977)</p> </div></div></div><div id="comment-wrapper-nid-26761"></div><img width='1' height='1' src='http://tipb.com.feedsportal.com/c/33998/f/616881/s/3e2978ab/sc/21/mf.gif' border='0'/><br clear='all'/>

<a href="http://da.feedsportal.com/r/204367207654/u/49/f/616881/c/33998/s/3e2978ab/sc/21/rc/1/rc.htm" rel="nofollow"><img src="http://da.feedsportal.com/r/204367207654/u/49/f/616881/c/33998/s/3e2978ab/sc/21/rc/1/rc.img" border="0"/>[/url]
<a href="http://da.feedsportal.com/r/204367207654/u/49/f/616881/c/33998/s/3e2978ab/sc/21/rc/2/rc.htm" rel="nofollow"><img src="http://da.feedsportal.com/r/204367207654/u/49/f/616881/c/33998/s/3e2978ab/sc/21/rc/2/rc.img" border="0"/>[/url]
<a href="http://da.feedsportal.com/r/204367207654/u/49/f/616881/c/33998/s/3e2978ab/sc/21/rc/3/rc.htm" rel="nofollow"><img src="http://da.feedsportal.com/r/204367207654/u/49/f/616881/c/33998/s/3e2978ab/sc/21/rc/3/rc.img" border="0"/>[/url]

<img src="http://da.feedsportal.com/r/204367207654/u/49/f/616881/c/33998/s/3e2978ab/sc/21/a2.img" border="0"/> (http://da.feedsportal.com/r/204367207654/u/49/f/616881/c/33998/s/3e2978ab/sc/21/a2.htm)<img width="1" height="1" src="http://pi.feedsportal.com/r/204367207654/u/49/f/616881/c/33998/s/3e2978ab/sc/21/a2t.img" border="0"/><img src="http://feeds.feedburner.com/~r/TheIphoneBlog/~4/rmYpHaMoxBY" height="1" width="1"/>

Source: Tim Cook says Apple will bolster security alerts, broaden 2-step verification, increase awareness (http://feedproxy.google.com/~r/TheIphoneBlog/~3/rmYpHaMoxBY/story01.htm)