Good news, iOS 9's new longer PIN could take hackers days instead of hours to launch brute force attacks

Image
ANI Washington
Last Updated : Jun 09 2015 | 1:42 PM IST

There is some unexpected good news for iPhone security buffs-the standard four-digit PIN will be six digits long in iOS 9, which will protect against brute-force attacks more effectively.

According to The Verge, security researchers have been creative in finding a way to do this.

They say adding more digits to the password isn't a perfect solution, but the small change would mean a huge headache for anyone attempting to stage a brute-force attack in iOS 9, resulting in 100 times as many possible passwords to check.

Current brute force PIN attacks take hours to work: ranging from 12 hours for simple attacks to a maximum of 117 hours for MDSec's more complex power-down attack.

In each case, there's always the chance that attackers will get lucky and stumble on the password in an early guess. Adding the extra two digits increases the response time to the scale of days, giving victims ample time to use Apple's powerful anti-theft tools to either track down their phone or brick it remotely.

The only downside is that password-protected users will have to punch in an extra two digits, but TouchID means that isn't as onerous as it might be. Phones can still be unlocked with a successful fingerprint match, cutting out the need for a PIN at all.

*Subscribe to Business Standard digital and get complimentary access to The New York Times

Smart Quarterly

₹900

3 Months

₹300/Month

SAVE 25%

Smart Essential

₹2,700

1 Year

₹225/Month

SAVE 46%
*Complimentary New York Times access for the 2nd year will be given after 12 months

Super Saver

₹3,900

2 Years

₹162/Month

Subscribe

Renews automatically, cancel anytime

Here’s what’s included in our digital subscription plans

Exclusive premium stories online

  • Over 30 premium stories daily, handpicked by our editors

Complimentary Access to The New York Times

  • News, Games, Cooking, Audio, Wirecutter & The Athletic

Business Standard Epaper

  • Digital replica of our daily newspaper — with options to read, save, and share

Curated Newsletters

  • Insights on markets, finance, politics, tech, and more delivered to your inbox

Market Analysis & Investment Insights

  • In-depth market analysis & insights with access to The Smart Investor

Archives

  • Repository of articles and publications dating back to 1997

Ad-free Reading

  • Uninterrupted reading experience with no advertisements

Seamless Access Across All Devices

  • Access Business Standard across devices — mobile, tablet, or PC, via web or app

More From This Section

First Published: Jun 09 2015 | 1:30 PM IST

Next Story