iPhones And iPads On iOS 13 Encryption Flaw

Forum Moderators: travelin cat

Message Too Old, No Replies

iPhones And iPads On iOS 13 Encryption Flaw

engine

5:48 pm on Mar 27, 2020 (gmt 0)

According to reports, Apple iPhones And iPads On iOS 13 have a security flaw when used with a VPN, and, currently, there's no workaround.

Instead of the iOS device shutting down all internet connections and then reopening them under the cloak of the VPN, it appears that from iOS 13.1 onward, Apple devices do not shut down open connections. And while anything new is secured by the VPN, those already open connections could be leaking data to the open internet, despite that reassuring little VPN logo on the screen.

[forbes.com...]

lammert

9:27 am on Mar 30, 2020 (gmt 0)

This is not so much about leaking plain data or an encryption bug. Metadata like IP addresses, TCP and UDP headers and ports the device communicates with are still visible for routers on the network after the VPN connection has been established but the data content itself is still secured. This is still a privacy issue because metadata snooping may still give valuable insights, but opening a VPN connection doesn't break security on already existing connections by itself. It just doesn't terminate and reconnect them through the encrypted tunnel.