2FA Fails To Secure Your iCloud Data

[maxosx]

According to this article I found on the Ars Technica site, Apple's Two-Factor Authentication is vulnerable, and does nothing to augment the security of your iCloud files.

Here's the link below, it would be a good topic of conversation.

Others viewpoints on this are welcome.

http://arstechnica.com/security/201...e-two-step-protection-wont-protect-your-data/

 

[ugahairydawgs]

It's kind of like the article says. There is a fine line between security and convenience and ease of use. Google's version can be a real pain in the backside. I think what Apple has done is a good start, but it could be beefed up a bit. My perfect solution would be a scenario where anytime a login happens from a new location it send an email notification to the account.

 

[Rigby]

Well, this is nothing new. All the 2FA really does is to replace the old security questions when resetting a password. But everything else is still only protected by the account password. E.g., you can log in to someone's icloud.com, read their emails, and remote-wipe their devices without ever being challenged for secondary authentication.

A key problem with Apple's security system as of today is that everything relies on the strength of your account password. But by frequently forcing the user to manually enter the password on a mobile device (e.g. whenever you install an app or buy something from the store), they make it impractical to use a strong password.