Security

iCloud Keychain securely syncs passwords and credit card numbers across devices

1Password, look out. Apple has created a new feature in OS X Mavericks called iCloud Keychain, and as you would expect, it allows you to sync passwords, credit cards, and other personal information across multiple devices.

Just like 1Password, iCloud Keychain can generate secure passwords for you. The nice thing about iCloud Keychain is that it is tightly integrated throughout the OS. In total you can save website logins, credit card numbers, Wi-Fi networks, and account information...

Security flaw compromises restricted iOS apps

Yesterday, we highlighted a proof-of-concept iPhone charger by researchers at the Georgia Institute of Technology which can be used to install malware on your non-jailbroken iPhone, iPod touch or iPad in under a minute. It's another example of the cat and mouse game played between hackers and Apple.

Today, we received word of an iOS security flaw which can be exploited to break the password required to restrict access to apps, content and features on your iPhone, iPod touch or iPad...

Proof-of-concept charger can install malware on iDevices in less than 60 seconds

Unlike the malware-infested Android, Apple's mobile platform is mostly malware-free. Little wonder that Apple prides itself with reviewing apps "to guard against malware" while asserting that other mobile platforms pose a "security risk".

But what if malicious users could hack your iPhone via a specially built charger - and in less than a minute? That's exactly what three researchers at the Georgia Institute of Technology claim is possible as they prep to show off a proof-of-concept charger which can be used to invisibly install malware on non-jailbroken iOS devices...

How to step up your Evernote account security with two-step verification

Following in the footsteps of Twitter, Apple, Dropbox, Google and others who recently ramped up security by rolling out two-step account verification, the note-taking platform Evernote today announced similar security features. Small wonder, given recent security exploits which prompted Evernote to issue a password reset across the board.

In a nutshell, two-step authentication makes your notes more secure by requiring a verification code sent to your phone whenever you’re asked to provide your username and password.

This will usually happen when logging into the web interface or installing Evernote apps on a new device, such as your iPhone, iPad or Mac. Additionally, Evernote is also launching Access History and Authorized Applications features. I've included more information right after the break...

‘Login with Amazon’ launches on iOS and Android

The online retail giant Amazon today launched a new sign-in service and an accompanying software development kit (SDK) for both Android and iOS app developers. The feature allows programmers to write apps letting folks login to apps, games, and web sites using their Amazon.com credentials. The Amazon sign-in taps the over 200 million active accounts hosted by "one of the most reputable companies in the United States," as the promo clip puts it...

Twitter heightens account security with two-factor authentication, enable it now

Remember how Apple - after a major security hole let attackers reset your Apple ID password using only your email address and date of birth - has enabled two-step authentication for Apple ID accounts? You'd be forgiven for thinking that every popular web service out there has by now adopted heightened security features, but that's not really the case.

Google, for example, last year enabled two-step process for Google Accounts, with Dropbox following suit a few months later. Today, micro-blogging platform Twitter joined the fray with its own version of two-step verification designed to keep the bad guys out of your account.

You should enable it immediately and iDB, as always, has you covered with a handy tutorial on that...

Pentagon clears iPhones and iPads

As expected, the Pentagon has finally approved Apple's iPhone and iPad devices for use on the United States military networks, Bloomberg learned Friday. The clearance sets the stage for Apple to compete with Samsung and BlackBerry for military sales. According to the report, the Defense Department today approved the use of Apple’s portable products running the iOS 6 software...

Huge 1Password update brings lots of changes

1Password is something of a hit with some members of the iDB team. Though I can obviously speak for myself only, I happen to know Jeff is a fan so it goes without saying we're both pretty excited about today's update.

The new 1Password version 4.2, now available as a free download to registered users, comes with a whole bunch of changes. For starters, it's got an optimized in-app web browser that on iPad includes the Strong Password Generator capability.

The improved browser can automatically submit passwords after using AutoFill for login items and now also recognizes a URL in the clipboard and offers to open it for you. That's just scratching the surface, go past the fold for the full changelog...

iPhone passcode security prompts law enforcement requests

Apparently, the law enforcement community needs to hire a few 13-year-olds able to crack the passcode on Apple's iPhone. There is such demand to help unlocking iPhones that one federal agency had to wait nearly two months for Apple, which even manages a waiting list, to unlock the smartphone. One "flaw" in Apple's otherwise tight mobile security could worry privacy advocates: the company reportedly does not inform iPhone owners when it bypasses the device's security measures...

Kwikset outs iPhone-exclusive wireless door lock

Kwikset, the lockset maker owned by Black & Decker's Hardware and Home Improvement Group, today announced an interesting smartphone-friendly wireless lock accessory that inches us closer to a fully connected home.

If you're a fan of the app-enabled wireless lightbub from Philips, how about locking or unlocking your door by simply touching the deadbolt?

And I meant touching it with your finger - you don't ever need to remove an iPhone from your pocket or purse. That's what Kēvo, a UniKey-powered wireless deadbolt door lock, does for you by connecting with your iPhone, iPod or iPad through wireless Bluetooth Smart technology. Say goodbye to fumbling with or looking for your keys - your Phone is now your key...

New FIPS 140-2 certification could broaden government use of iOS 6

There's been a lot of talk lately regarding Apple and its efforts to broaden the use of iOS in government agencies. The latest report says the US Department of Defense is close to granting both the iPhone and iPad approval for secure use.

Today comes word that the DoD might have just received the green-light it needed to move forward. The National Institute of Standards and Technology (or NIST) just announced that iOS 6 has achieved FIPS 140-2 certification (Level 1)...