With iOS 13, Apple prevents apps from accessing users' private notes in Contacts – TechCrunch



[ad_1]

Apple close a loophole that allowed application developers to access potentially sensitive and private data from users. With the launch of iOS 13, applications that request access to user contacts will no longer be able to read data in the "Notes" field of these address book entries.

For years, security professionals have warned users against storing confidential information in their phone's address book because they are not protected or encrypted. And that makes him vulnerable.

Still, users continued to use their address book as an impromptu password manager. Or, they would enter various private information in the Contacts Notes field.

They might have written down their DAB PIN code, their home door code, a safe code, a social security number, credit card information, and so on. They may also have written personal notes about someone they would not like to share.

However, when an iOS application requests access to a user's contacts, they receive all that data from the Notes field, in addition to the stored name, address, email, and phone number.

This week, at the Apple Worldwide Developer Conference, the company announced that it would no longer be the case.

According to Apple, the Notes field could include potentially sensitive details, such as sneaky comments about the boss. In fact, the Notes field of many users may have been much worse than that.

The company explained that most applications do not need to request this private data, so this change would not affect them. However, if an application developer thinks he has a valid reason for accessing the Notes field, he will be able to make an exception request.

Most users probably have not thought too much about this problem. After all, those who were smart enough not to use their address book for sensitive information make fun of this change because it does not affect them.

And those who knew nothing better now call on Apple to ensure the confidentiality of their private data.

[ad_2]

Source link