Could someone tell me how secure is the password-protected database that is offered as a feature of DTTG?
Given the fact that a phone is much easier to lose or be stolen than a laptop, I don’t think I would make much use of this app unless I knew my data was secure.
Could I sync an encrypted database with DTTG if I wanted additional security?
The database is not encrypted on the device but in general one app’s data cannot be read from any other app unless the device is being jailbroken.
Eric.
Hi Eric,
-
Forgive my ignorance in these matters - am I correct in assuming that even if a database is encrypted on my desktop, it will not remain encrypted when synced with DTTG??
-
So, are you saying that someone who jailbreaks the phone, could also gain access to the contents of a password-protected database?
I understand that data cannot typically be read between apps on the iphone OS but I am wondering if there are any other ways to get data off an iPhone? particularly nefarious methods?
Till now, the iPhone has been rather inconvenient as a file storage device so I know very little about data security in this area. With DTTG, I think this information is quite important.
Your insight is much appreciated.
Eric, if you have time, I would like to hear your response to my questions. Or perhaps you could chime in here Bill.
Thanks
I believe I can answer your questions:
-
That is correct, an encrypted database in your desktop DT application is not encrypted when synced to your device.
-
The iPhone OS does not allow any application to ‘see’ data stored by other applications. Thus, no other application can access your DT databases/files on your iPhone or iPad. If you ‘jailbreak’ your iPhone/iPad, this removes the normal OS protections that separate applications so you (and other applications) can view all the data on your device much like in a standard filesystem. Of course, you need to install a jailbreak on your device through a number of steps (an iOS application cannot do this remotely or without your knowledge), so you would have to actively engage in the jailbreak process in order to complete this removal of OS protections.
Since you express concern about security with your mobile device, it is worth noting that ‘jailbreaking’ is not a major concern. The theft or loss of your device poses a far greater threat. Apple recommends as a minimum that you set a passcode to unlock your device and install their “Find my iPhone” application to help locate it should you lose it. Basically, you should seriously consider the risks of carrying around information of a very sensitive nature, either personal or business-related. If such data were to pose a serious risk to your business or personal life if it falls into the wrong hands, either treat your iPhone/iPad as your life depended on it or don’t place such data on the device. The rule of thumb in computer security circles is that your data is only as safe as the motivation on the part of others to gain access to it. In other words, if you are carrying around national security secrets, you should expect that the best techniques are going to be applied to gain access to it. One’s daily grocery list, not so much. In summary, the greatest risk to your data on an iOS device (not jailbroken), is the physical loss of the device. Applying some common sense safeguards should be adequate to insuring the security of your data.