Hardening iOS

Keeping it as simple as possible. iOS evolves fast. An old and new iPhone are underway for further pentesting, after which these mitigations will be updated (when we have time).

Accounts and authentication

• Introduction
• Using a SIM PIN
• Touch ID and Face ID?
• Auditing and changing password reuse
• Automagically creating strong passwords
• Using multifactor authentication (MFA)

Services and applications

• Introduction
• Auditing and blocking the access apps have
• Unwanted third party apps (UAPs)
• Blocking apps from accessing Bluetooth data
• Checking for unknown configuration profiles
• Browsers that protect your privacy
• Changing default browser app
• Using more secure messaging services
• Using more secure email services
• Using SSH tunnels
• Using VPN services
• Using Tor proxies
• Changing MAC address
• Editing hosts file

Data

• Introduction
• Encrypting the data
• Worst case, nuking all data

Privacy

• Introduction
• Silencing spam callers
• Changing default search engine

Malware

• Introduction
• Threat awareness
• Installing a third party security app
• Finding the culprit and removing it
• Ransomware

Operations security

• Introduction
• Threat awareness
• Not getting juice-jacked
• Not auto-joining Wi-Fi networks
• Using email more securely
• Browsing more safely
• Measuring Internet Censorship
• ‘;–have i been pwned?

Guards! Guards!

• Introduction
• Lockdown Privacy