Sunday, October 12, 2008

Beware Your iphone secret personal data could be explited

Two trends in cellphones are combining to create a new security risk. On the one hand they are becoming more powerful, and more like computers. On the other, they are universally relies upon.

As Nokia's cellphone Anthropologist puts it, all over the world people take three things with them when they leave the house: keys, money and phone.

The result: an easily lost or stolen device with a lot of private and sensitive data on. And this week released a book called iPhone Forensics (published by O'Reilly) gives an insight into the surprising amount of personal information to smartphone can store. Or give away.
Here's a list of ways in which your iPhone could release sensitive data about you - I image much the same could be Gleaner from other similarly advanced handsets.

* Past keyboard input - "Nearly everything typed into the iPhone's keyboard to keyboard is stored in cache, which can linger even after deleted." That will include user names, passwords and much more.
* Deleted images from the photo library, web camera and roll history can sometimes be recovered.
* Deleted address book entries, contacts, calendar events can also sometimes be recovered.
* "Exhaustive call history, beyond that displayed, is generally available." The last 100 entries can usually be found, and deleted call records recovered.
* Map tile images, direction and location coordinates lookups from the Google Maps application. In effect, where you've been or may be planning to go.
* Deleted browser cache can usually be recovered, Revealing the websites you've visited.
* Cached and deleted emails, SMS messages and other communications can be recovered, along with information on when and who they were sent to.
* "Deleted voicemail recordings often remain on the device."

The rest of Jonathan Zdziarski's book details the tools and techniques that will give you access to all those. Apart from an iPhone, all you need is some free software.

Police forces already use records recovered from GPS units to solve crimes. Techniques like those in Zdziarski's book look set to become a big part of the work of police and criminals alike.

No comments: