Security and Privacy Changes in iOS 8

As part of an ongoing research to review new features introduced in iOS 8, Data Theorem made a presentation about the security and privacy implications of some of these new tools and frameworks available to developers. The slides providing a high-level overview of some of our findings are available here.

Additionally, through a research project with Carnegie Mellon students, Data Theorem and the students released a proof of concept demontrating the risks associated with one the features described in the presentation, custom keyboards. The tool is a key-logging custom keyboard which, once installed on a device, will log all the keystrokes entered by the user and send them to a server. More information is available on the project’s repository on GitHub.