Kaspersky Lab has discovered a vulnerability in the Darwin kernel of the Apple operating system that if exploited, leaves OS X and iOS 8 devices exposed to the remote activation of denial of service attacks on the devices.
Keep in mind that doing everything we mention here will deprive your iPhone of some of its helpful features, but at the same time it will better protect your private data. You don’t have to follow all of the tips, so feel free to choose what you’re ready to sacrifice for the sake of security — it’s completely up to you.
1.Use a strong password instead of a 4 digit code
The simplest and most efficient way to protect your data is to use a strong password instead of a simple 4 digit pin code for unlocking your iPhone. It’s a good idea to use a combination of letters, digits and symbols. It’s even better if the password is requested immediately after the lock screen, without any delay. As an extra option, you can also turn the “erase data” feature on, so the device will wipe everything from its memory after 10 failed passcode attempts. But keep in mind that all the data will be erased forever and you won’t be able to recover it, so it’s best not to forget your password.
How will it help? It will reduce the chances of a criminal being able to guess your password.
Where can you set these requirements? Go to “Settings” –> “Passcode” (or “Touch ID and passcode”) –> “Require passcode: immediately”; “Simple passcode: off”
2.Turn off lock screen notifications
Any password, even the strongest one, won’t prevent your data from being revealed if it appears on a lock screen. Messages, emails, and other information in your apps can contain some sensitive data like confirmation codes, private appointments, financial data, etc. The less your iPhone shows on a lock screen, the safer your data is.
How will it help? It won’t let strangers oversee information showing up on a lock screen.
Where can you set these requirements? Go to “Settings” –> “Passcode” (or “Touch ID and passcode”) –> “Allow access when locked” section.
3.Turn on two-step verification for Apple ID and iCloud
One lock is good, but two is better. That’s why it’s highly recommended that you set up two-step verification whenever it’s available for Apple ID and iCloud. When you set up two-step verification, you register one or more trusted devices (devices you control) that can receive 4-digit verification codes using either SMS or the Find My iPhone service. Then, any time you sign in to manage your Apple ID, sign in to the iCloud, or make an iTunes, iBooks, or App Store purchase from a new device, you’ll need to verify your identity by entering both your password and a 4-digit verification code.
How will it help? It will prevent your Apple account from being used by somebody that is not authorized.
Where can you set these requirements? Go to https://appleid.apple.com –> “Manage your Apple ID” –> “Password and Security” –> “Two-Step Verification”.
Anybody can use Siri on a lock screen while you’re away from your iPhone.
4. Disable Siri on a lock screen
Anybody can use Siri on a lock screen while you’re away from your iPhone.
Siri is a great Phone feature, but sometimes this nice personal assistant can give away some information that you would prefer to keep confidential. It’s not necessary to turn it off completely, but you will be much more secure if you prevent it from activating from a lock screen or on a “Hey Siri” voice command. Don’t forget: Siri can communicate with anyone, not just with an owner of the device it works on.
How will it help? It will eliminate the possibility of data extraction from the smartphone using Siri.
Where can you set these requirements? Go to “Settings” –> “Passcode” (or “Touch ID and passcode”) –> “Allow access when locked” section –> “Siri: off” and “Settings” –> “General” –> “Siri” –> “Allow “Hey Siri”: off”.
5. Turn off automatic sync to iCloud
As you might know, a lot of pictures from a recent leak were originally stored on Apple’s iCloud servers, which drove many celebs crazy. They thought that deleting a photo from a phone would solve the problem, but it doesn’t: after syncing to the “cloud” the data stays there, even if you get rid of it locally. Actually it happens with almost any kind of data if we are talking about iPhones and iCloud: messages, notes, contacts, documents — everything syncs automatically unless you turn it off. And that’s what we’d recommend, especially if you have just a couple of Apple devices and don’t need to sync them on a daily basis.
How will it help? It will reduce the risk of compromising your data while it’s on the iCloud servers, or if you loose one of your Apple devices.
Where can you set these requirements? Go to “Settings” –> “iCloud”
6. Turn off cookies in your browsers
Cookies are small files which almost any website generates and leaves on your device. They may contain some information about you, your computer or smartphone, and your preferences. It helps websites keep you logged in, or to show you some relevant content including ads, but in some cases they may be very helpful to cybercriminals as they can contain credentials and other sensitive data. To be honest, turning off cookies might bring you more stress than relief, but it helps your data by being more secure. Plus, some discomfort is not the biggest price you have to pay for data protection.
How will it help? It will reduce the risk of unauthorized use of your login data and some other private information stored in cookie files.
Where can you set these requirements? For Safari: Go to “Settings” –> “Safari” –> “Privacy & Security” section –> “Do Not Track: on”, “Block Cookies: Always Block”; For third party browsers: see similar browser settings.
7. Turn off the AutoFill option in your browsers
The same goes for the AutoFill option: if somebody gets your iPhone, then chances are this person will be able to log in as you on a number of sites. You don’t want this to happen, do you? Then switch it off! Again, you’ll experience some inconveniences, but it’s worth it.
How will it help? It will reduce the risk of someone logging into websites with your credentials when your iPhone is stolen or given to somebody.
Where can you set these requirements? For Safari: Go to “Settings” –> “Safari” –> “General” section –> “Passwords & AutoFill”; For third party browsers: see similar browser settings.
8. Don’t let apps access your contacts, photos, messages and other private data
This tip is quite extreme, but if you already followed every single recommendation we gave, then you might as well go ahead with the last one. In iOS 8 there’s a significant number of features and data types that almost any app can access: from GPS, to contacts, to messages. For example, if you install a third party keyboard you must give it full access to everything you are typing in order for you to be able to use it. If this sounds quite non-secure to you, then you have no choice but to go to “Settings” and prevent all these corporation-driven apps from accessing your data. After that you probably won’t be able to use some of the apps that you have, but that’s the way it is.
How will it help? At least it will give you some confidence in knowing that large companies like Google or Facebook won’t get any information about where you are, what you are doing and what kind of pizza you like.
Where can you set these requirements? Go to “Settings” –> “Privacy”.
