Questions tagged [icloud]

8 questions
29
votes
3 answers

Someone created a Disney+ account with my e-mail address. Are there any security concerns?

I got an Email (to my iCloud address) from Disney+. The email contained a subscriber agreement. I did not register for their service myself. On the Disney+ website I saw that there was indeed an account for my email address. Using "forget password"…
Jan
  • 301
  • 2
  • 8
3
votes
0 answers

Do passkeys on iCloud Keychain ever exist unencrypted outside the secure enclave?

Regarding Apple's beta feature of storing WebAuthn passkeys in the iCloud Keychain, does anybody know if the unencrypted passkeys ever leave the secure enclave, and get stored in RAM or anything? With traditional WebAuthn on a Yubikey or similar…
1
vote
0 answers

Is iCloud Private Relay leaking my DNS queries to my ISP?

So I noticed recently that despite iOS settings saying all DNS queries go through iCloud Private Relay's DNS servers, despite Private Relay using Oblivious DNS over HTTPS, and even despite dnsleaktest.com (and others) showing nothing but Cloudflare…
1
vote
0 answers

How is .NET Core isolated storage "secured" on various OS's?

I'm looking for a consolidated list of how and where isolated storage is managed on each operating system... (Windows, MacOS, Linux, (mobile?), ...) Does such a list exist? What considerations might be worth considering in conjunction or as an…
TLDR
  • 700
  • 1
  • 7
  • 17
1
vote
0 answers

Does Apple leak iCloud usernames?

I've just set up my first iPad, and first Apple device. To be extra cautious when setting it up, I created a brand new @icloud.com username, to use as the Apple ID. The username was 10 characters long, and included random alphanumeric characters.…
user1751825
  • 905
  • 4
  • 10
0
votes
1 answer

iCloud Private Relay MITM Defense?

When it comes to defending against MITM attacks while using public Wifi, is the security offered by iCloud Private Relay comparable to using a VPN? Edit: My motivation for asking the question comes from the PDF overview published by Apple. In it…
John
  • 2,242
  • 2
  • 28
  • 45
0
votes
1 answer

Is it bad practice to store passwords in iCloud notes?

I was wondering something about a day ago when I remembered that Apple stores notes in a database (so you can recover them or view them on icloud.com) - What if Apple stores your notes in plaintext? I've heard you shouldn't store passwords in…
Parking Master
  • 241
  • 1
  • 9
0
votes
0 answers

Are last access time and location of connected devices recorded in iCloud?

During a Forensic investigation, I parsed the sysdiagnose log file /brctl/Brctl-dump.txt and I discovered 50 devices connected to the same iCloud account. Is it possible to retrieve from Apple the connection times and location to iCloud?