How safe is the cloud? Preventing hackers
Perhaps you have seen or read on social networks about the violation of privacy of several celebrities last weekend. It is not sure if some of these photos have been circulating the Internet are real but many celebrities confirmed to be victims of this. Therefore, as there are many users of these systems as Google Drive and Dropbox, among others, I wanted to provide you some security information to consider.
Hackers seeking personal information on accounts and cell phones has always been around, the problem this time are the rumors of a broader attack on iCloud and its Photo Stream feature, although it has not been confirmed.
On its website, Apple has an overview of security measures to protect data in iCloud which are encrypted on both the server and when in transit (device to server). For photos, Apple says that there is a minimum level of 128-bit AES encryption.
Moreover, Apple uses secure tokens to authenticate an account. This means your user name and password are not stored within the applications themselves. This means that as long as your password is unique and safe, it is very difficult for someone to intercept your data as it is sent from the phone or computer to Apple’s servers.
The real problem is how strong and unique is your password.
Apple requires users to have a password with at least 8 characters, a number, a capital letter and a lowercase letter. So far so good. The issue is that among so many sites and passwords to remember, often we use the same for different accounts. This is problematic because if a site frequently used is hacked and used this combination of email / password for other accounts, all these accounts are at risk, too.
But the risk is being analyzed and can be mitigated by using what is called two-factor authentication (when to access an account, you must log on with a password and a code of one device usually through SMS).
Apple offers its own support two-factor authentication for iTunes and iCloud accounts. Although it is a very good service, the installation process is complicated and difficult to configure, so that many users do not configurate it in their accounts. This means that the password is unsupported and if it is weak or used in other sites as discussed earlier, ends up being more likely to hack.
Finally, the files sent and stored in iCloud are encrypted and secure while the data on the device itself, not so much. If you don’t use a device access code and user approval option to access USB in new machines, someone could connect it to another machine and copy the files that are not encrypted, in general photos and videos.
Summing up, iCloud is reliable for now and you should not have problems with your information stored there. But we must also be responsible with our passwords and security of our data for iCloud and also our mails, social networking and online shopping sites using strong, unique passwords, and using blocking enabling two-factor authentication if available.
I hope this information has been helpful!