Hello, welcome to the Wednesday, August 23rd, 2017 edition of the Santa Net Stormson,

Stormcast. My name is Johannes Ulrich, and today I'm recording from Virginia, Beach, Virginia.

Russian forensics company Elcomsoft that has made a name for itself with the analysis of, for example, iPhones and ICloud data has released a new feature that

allows investigators to retrieve a copy of the Apple keychain from ICloud backups.

Now, while this sounds bad, it's actually not a vulnerability and comes with quite a few requirements.

Investigator first needs the username and password to access ICloud and also needs a trusted device that was synced with ICloud in order to unlock the keychain.

Also iOS and OS10 will not store the keychain with iCloud unless a two-factor authentication is enabled. Well, what this really means is that you

have to be careful with your iCloud credentials if you do store your keychain within iCloud.

That should be obvious in some way

that's true for any kind of password manager that does store credentials in the cloud the

security of these credentials is pretty much always linked to the security of the passphrase

that you use to authenticate.

The iCloud option is in so far probably better than some of these keychain managers

in that it does require two-factor authentication via a trusted device.

Now, Elcomsoft also announced that they will implement the ability to download the keychain

using an authentication token that can be retrieved from a PC or a Mac that is authenticated to ICloud.

This could be a little bit more problematic because that's a file that could probably be stolen using malware.

Another issue, of course, with all of these cloud-based passport managers

is that the user has little visibility in who is accessing their keychain using the cloud backup.

There are typically no easy accessible logs for the end user.

Now, one of the interesting new privacy threats that is associated with increasing home automation

is the ability of many of these devices to map rooms. Now, a few weeks back, there some release from Roomba. Rumba apparently did submit

...