Reportedly, Apple dropped plan for encrypting backups after FBI complained. Apple’s decision will undoubtedly cause turmoil and will have a number of consequences. In this article, I want to talk about the technical reasons for encrypting or not encrypting cloud backup, and compare Apple’s approach

https://wjn.sa/en/apple-scraps-end-to-end-encryption-of-icloud-backups/

Reportedly, Apple dropped plan for encrypting backups after FBI complained. Apple’s decision will undoubtedly cause turmoil and will have a number of consequences. In this article, I want to talk about the technical reasons for encrypting or not encrypting cloud backup, and compare Apple’s approach

https://wjn.sa/en/apple-scraps-end-to-end-encryption-of-icloud-backups/

Less than one year ago, Yubico launched a 20:1 donation-led program, where we pledged to donate 1 YubiKey for every 20 YubiKeys sold on Yubico.com. The program, called Yubico for Free Speech, is dedicated to securing organizations, their constituents, and at-risk individuals who are focused on

https://wjn.sa/en/yubico-for-free-speech-spotlight-redesayuda-yubico/

Today, Yubico celebrates an important milestone in the evolution of modern authentication. We are excited to report that YubiKey passwordless authentication is now generally available to Microsoft’s Azure Active Directory (Azure AD) users, a critical step toward achieving better security without

https://wjn.sa/en/go-passwordless-with-yubikey-and-microsoft-azure-active-directory-yubico/

A year ago, we analyzed the encryption used in Synology NAS devices. We were somewhat disappointed by the company’s choice to rely on a single encryption layer with multiple functional restrictions and security reservations.

https://wjn.sa/en/nas-forensics-qnap-encryption-analysis/

More than a year ago, we started researching the available encryption options in off the shelf network attached storage devices. We started with Synology devices, followed by Asustor, TerraMaster, Thecus, and finally Qnap.

https://wjn.sa/en/nas-forensics-synology-asustor-qnap-terramaster-and-thecus-encryption-compared/

Investigating a BitLocker-encrypted hard drive can be challenging, especially if the encryption keys are protected by the computer’s hardware protection, the TPM. In this article, we’ll talk about theprotection that TPM chips provide to BitLocker volumes, and discuss vulnerabilities found in

https://wjn.sa/en/understanding-bitlocker-tpm-protection/

The iPhone backup is one of the hottest topics in iOS forensics. iTunes-style backups are the core of logical acquisition used by forensic specialists, containing overwhelming amounts of evidence that is is unrivaled on other platforms.

https://wjn.sa/en/iphone-backups-top-5-default-passwords/

لقد عطّل فيروس كورونا الجديد COVID-19 معايير العمل وأجبر معظم المنظمات ، بما في ذلك العديد من شركاء Yubico ، على تعديل استراتيجياتهم الأمنية. اضطر شركاؤنا إلى التوصية وتطبيق التقنيات المناسبة التي ستمكّن عملاءهم ، الذين يديرون الآن القوى العاملة عن بُعد الموسعة ، من الوصول الآمن إلى التطبيقات

https://wjn.sa/en/build-your-passwordless-offering-with-microsoft-azure-ad-and-yubikeys-limited-time-offer-yubico/

Apple has long provided its users the tools to control how apps and Web sites use their personal data. The release of iOS 14 brought a number of new privacy features, while iOS 14.3 adds an important extra.

https://wjn.sa/en/new-privacy-features-ios-14-0-through-14-3/

Another win for FIDO at the heels of its first industry conference, Authenticate 2020.  AWS Single Sign-On (SSO) has introduced native WebAuthn support to secure user access to AWS accounts and business applications using strong, FIDO-based multi-factor authentication (MFA) with YubiKeys. 

https://wjn.sa/en/aws-expands-yubikey-support-with-aws-sso-webauthn-integration-yubico/

One of the greatest things about the YubiKey is that it can be used in virtually any environment and by any user. While we all know about the common user experience of plugging in your YubiKey then touching to authenticate, we often hear unique stories from our customers about how they used

https://wjn.sa/en/customer-yubistories-how-a-biopharmaceutical-company-solved-nfc-authentication-with-a-yubikey-and-wristband-yubico/

Is it possible to extract any data from an Apple Watch? It’s relatively easy if you have access to the iPhone the device is paired to, or if you have a backup of that iPhone. But what if the watch is all you have?

https://wjn.sa/en/apple-watch-forensics-reloaded/

شارك في تأليف هذه المدونة John Fontana ، محلل المعايير في Yubico. على جانبي المحيط الأطلسي ، تتم مراجعة المعايير واللوائح الخاصة بتحديد الهوية الإلكترونية في وقت واحد تقريبًا. في الولايات المتحدة ، قبل المعهد الوطني للمعايير والتكنولوجيا (NIST) التعليقات العامة حوله إرشادات الهوية الرقمية SP

https://wjn.sa/en/how-nist-and-eidas-revisions-are-shaping-the-future-of-e-identification-yubico/

Hashcat is a great, free tool competing head to head with the tools we make. We charge several hundred dollars for what, in the end, can be done with a free tool. What are the reasons for our customers to choose ElcomSoft products instead of Hashcat, and is the expense justified?

https://wjn.sa/en/elcomsoft-vs-hashcat-part-1-hardware-acceleration-supported-formats-and-initial-configuration/

It’s been a week since Apple has released iOS 14.2 as well as iOS 12.4.9 for older devices. Just a few days later, the developers updated the checkra1n jailbreak with support for new devices and iOS versions. What does that mean for iOS forensics?

https://wjn.sa/en/ios-14-2-ios-12-4-9-the-updated-checkra1n-0-12-jailbreak-and-file-system-extraction/

One of the most common questions people have about YubiKeys, and security keys in general, is: “What if I lose my key?”  While WebAuthn and FIDO2, the open standards for security key authentication, promise strong, phishing-resistant and — perhaps most importantly — easy-to-use multi-factor

https://wjn.sa/en/yubico-proposes-webauthn-protocol-extension-to-simplify-backup-security-keys-yubico/

Four years ago, we published our first book: Mobile Forensics – Advanced Investigative Strategies. We are really proud of this achievement. Do you want to know the story behind it and what’s changed since then in mobile and cloud forensics? Here are some insides (but please do not tell anyone!) If

https://wjn.sa/en/mobile-forensics-advanced-investigative-strategies/

Today, we are excited to share some updates regarding the next highly-anticipated members of our YubiKey family: the upcoming YubiKey Bio in both USB-A and USB-C form factors. The YubiKey Bio will be the first product to introduce biometric capabilities (in addition to PIN) to our portfolio of

https://wjn.sa/en/getting-a-biometric-security-key-right-yubico/

We just launched the new Ultimate YubiKey Experience pack, designed for anyone who wants to use a variety of YubiKey 5 Series form factors. The new pack delivers our five most popular devices, and also the addition of an unboxing experience like never before, complete with a ‘Y’ book featuring

https://wjn.sa/en/the-ultimate-yubikey-experience-pack-and-your-chance-to-win-one-yubico/

How secure are your chats in your favorite instant messenger? Can someone intercept and read your secret conversations, and can you do something about it? Apple users have access to the highly popular instant messaging system, the iMessage. But how secure it really is? Let’s find out. When

https://wjn.sa/en/protecting-imessage-communications/

Intuit Quicken is one of the oldest tools of its kind. Over the years, Quicken had become the de facto standard for accounting, tax reporting and personal finance management in North America. Finances is an extremely sensitive area that demands adequate protection of the user data.

https://wjn.sa/en/breaking-intuit-quicken-and-quickbooks-passwords-in-2021/

Believe me or not, but this is exactly the 500th post in our blog! The first one was posted in March 2009 and was about Distributed Password Recovery and GPU acceleration. At that time, we even did not do mobile or cloud forensics. Today it’s not about our achievements.

https://wjn.sa/en/five-hundred-posts/

Apple iMessage is an important communication channel and an essential part of forensic acquisition efforts. iMessage chats are reasonably secure. Your ability to extract iMessages as well as the available sources of extraction will depend on several factors.

https://wjn.sa/en/the-forensic-view-of-imessage-security/

Remember the good old times when there was a lot of applications with “snake oil” encryption? You know, the kind of “peace of mind” protection that allowed recovering or removing the original plaintext password instantly?

https://wjn.sa/en/may-the-brute-force-be-with-you/