On Thu, Feb 10, 2011 at 11:40 AM, David Lum <[email protected]> wrote:
> What I don’t know is if this phone OS is any worse than anything else in
> use. Anyone care to comment?:

>From TFA:

>> ... requires possession of the phone ...

  Okay, so, first rule of computer security is, if someone else has
physical access to your computer, it's not your computer anymore.

  But still, good crypto can prevent data disclosure, if used properly.

>> ... the cryptographic key on current iOS devices is based on material
>> available within the device and is independent of the passcode ...

  So much for the crypto being used properly.

  Thinking about it, I'm not really surprised.  The iPhone is
primarily a consumer device.  Consumers forget their passwords more
often than they change their socks, and they always want the provider
to be able to pull their butt out of the fire.  It makes sense that
the security design would be built around that.

  True security means it locks you out of the asset, too.  Most people
don't accept responsibility, so that's out.

  Informed tech people will continue to consider the iPhone a less
"business capable" platform as long it gives priority to the consumer
mindset to the exclusion of the business mindset.  However, Apple
won't care, because the tech people will continue to be overridden by
PHBs who just want a shiny, flashy toy/status symbol.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to