{"id":14552,"date":"2019-02-08T10:30:23","date_gmt":"2019-02-08T18:30:23","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/02\/08\/news-8302\/"},"modified":"2019-02-08T10:30:23","modified_gmt":"2019-02-08T18:30:23","slug":"news-8302","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/02\/08\/news-8302\/","title":{"rendered":"How to stay as private as possible on Apple&#039;s iPad and iPhone"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2019\/01\/mls19_021_iphoneresolutionshabits-100786849-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Jonny Evans| Date: Fri, 08 Feb 2019 09:39:00 -0800<\/strong><\/p>\n<p>Apple <a href=\"https:\/\/www.computerworld.com\/article\/3331953\/mobile-wireless\/we-need-new-privacy-laws-urges-apple-ceo-tim-cook.html\" rel=\"noopener\" target=\"_blank\">believes in your right to privacy<\/a>. Here is some advice on how to use the tools it has given you to protect your privacy on an iOS device.<\/p>\n<p>You probably already use a 4-digit passcode, but you can improve that with a 6-digit or alphanumeric code.<\/p>\n<p>You change this in <em>Settings&gt;Touch ID\/Face ID &amp; Passcode<\/em>, select <em>Change Passcode\u00a0<\/em>and then tap the small<em> Passcode Option<\/em>s dialog. <a href=\"https:\/\/www.computerworld.com\/article\/3203244\/apple-ios\/8-reasons-why-you-should-strengthen-your-ios-passcode-today.html\">Alphanumeric codes are harder to decipher<\/a>, just make sure you remember the code.<\/p>\n<p>Once you have protected your device with a solid passcode it makes more sense to use Touch ID or Face ID, unless security policy forbids you doing so.<\/p>\n<p>What happens if someone gets their hands on your device and wants to get at the data it contains? Given there are just 10,000 combinations for 4-digit code (and <a href=\"http:\/\/www.datagenetics.com\/blog\/september32012\/index.html\" rel=\"noopener nofollow\" target=\"_blank\">many more passcodes start with \u20181\u2019,<\/a> rather than any other number), it makes sense to at least reduce the number of chances a miscreant has of guessing your number.<\/p>\n<p>To so, open <em>Face\/Touch ID &amp; Passcode\u00a0<\/em>and ensure the <em>Erase Data\u00a0<\/em>option is on (Toggle to green). This will erase all the data on your device after 10 failed passcode attempts.<\/p>\n<p>Privacy isn\u2019t just about what people can see when you are online, it\u2019s also about protecting your device when it\u2019s alone, visible to others, or unprotected.<\/p>\n<p>One of the big bugbears here is the habit of allowing people to access Siri from the Home screen or allowing message previews to appear on the lock screen.<\/p>\n<p>You can control this behaviour in<em> Settings&gt;Face ID &amp; Passcode<\/em>, in the <em>Allow Access When Locked\u00a0<\/em>section.<\/p>\n<p>Here you\u2019ll find controls for the following:<\/p>\n<p>For maximum protection you should disable all of these, but that is a trade-off between convenience and privacy. I keep <em>Notification Centre<\/em>,\u00a0<em>Control Centre <\/em>and <em>Return Missed Call\u00a0<\/em>active myself. I do limit the number of apps that can send me Lockscreen Notifications.<\/p>\n<p>Maximize privacy by disabling Show Previews for any app notifications so your communications won\u2019t appear on the lock screen.<\/p>\n<p>Finally, why not reduce the auto-lock time to 30-seconds in <em>Settings&gt;Display &amp; Brightness&gt;Auto-Lock?<\/em><\/p>\n<p>You should always use a VPN (Virtual Private Network), as this makes it much harder for others to monitor, track or intercept your Internet traffic.<\/p>\n<p>Your company may provide you with one of these and you should use it. If they don\u2019t, then be sure to reach for reputable services, as a VPN service provider will actually have access to all your traffic many free services <a href=\"https:\/\/www.top10vpn.com\/guides\/secure-public-wifi-connection\/\" rel=\"noopener nofollow\" target=\"_blank\">cannot be trusted<\/a>.<\/p>\n<p>Reputable services include <a href=\"http:\/\/www.nordvpn.com\/\" rel=\"noopener nofollow\" target=\"_blank\">NordVPN<\/a>, <a href=\"https:\/\/www.cyberghostvpn.com\/en_GB\/\" rel=\"noopener nofollow\" target=\"_blank\">CyberGhost<\/a> and <a href=\"https:\/\/www.expressvpn.com\/?refID=UK_Brand_KWG1&amp;creative=280198707248&amp;targetid=kwd-36797151821&amp;matchtype=e&amp;device=c&amp;campaignid=1467038064&amp;adgroupid=58609025442&amp;feeditemid=&amp;loc_physical_ms=9046006&amp;loc_interest_ms=&amp;network=g&amp;devicemodel=&amp;placement=&amp;keyword=expressvpn&amp;target=&amp;aceid=&amp;adposition=1t1&amp;creative=280198707248&amp;targetid=kwd-36797151821&amp;matchtype=e&amp;device=c&amp;campaignid=1467038064&amp;adgroupid=58609025442&amp;feeditemid=&amp;loc_physical_ms=9046006&amp;loc_interest_ms=&amp;network=g&amp;devicemodel=&amp;placement=&amp;keyword=expressvpn&amp;target=&amp;aceid=&amp;adposition=1t1&amp;gclid=EAIaIQobChMI6_C-suj53gIVbQDTCh2rnwrsEAAYASAAEgIu3fD_BwE\" rel=\"noopener nofollow\" target=\"_blank\">ExpressVPN<\/a>. Both <a href=\"https:\/\/windscribe.com\/\" rel=\"noopener nofollow\" target=\"_blank\">Windscribe<\/a> and <a href=\"https:\/\/www.tunnelbear.com\/\" rel=\"noopener nofollow\" target=\"_blank\">TunnelBear<\/a> seem to be respected. Some of these services can be accessed using the built-in VPN inside your device, while others rely on apps. In general, the <a href=\"https:\/\/www.imore.com\/how-configure-vpn-access-your-iphone-or-ipad\" rel=\"noopener nofollow\" target=\"_blank\">built-in VPN<\/a> is the most reliable approach.<\/p>\n<p>Browser fingerprinting is a process that uses publicly shared information about your device to identify and track what that device does online.<\/p>\n<p>This is information such as platform, screen resolution, browser \u2013 even fonts or accelerometer info. (It is worth noting that the more browser plug-ins and extensions you use, the easier you make it for fingerprinting systems to identify you).<\/p>\n<p>Combined, this lets unaccountable analytics firms develop an extremely accurate picture about site visitors and what they do.<\/p>\n<p>So, how much information are you giving away right now? These two sites will show you: <a href=\"https:\/\/amiunique.org\/fp\" rel=\"noopener nofollow\" target=\"_blank\">AmIUnique.org<\/a> and <a href=\"https:\/\/panopticlick.eff.org\/\" rel=\"noopener nofollow\" target=\"_blank\">Panopticlick.eff.org<\/a> \u2013 I think you\u2019ll be surprised.<\/p>\n<p>Apple is taking action to prevent this kind of activity.<\/p>\n<p>Safari has a range of privacy settings you can access in <em>Settings&gt;Safari<\/em>&gt;<em>Privacy &amp; Security<\/em>.<\/p>\n<p>They include:<\/p>\n<p>Apple still insists on making Google the default search engine for Safari on iOS.<\/p>\n<p>You don\u2019t need to wait for Apple to change this, you can do it yourself in\u00a0<em>Settings&gt;Safari&gt;Search Engine\u00a0<\/em>and change this to <a href=\"https:\/\/duckduckgo.com\" rel=\"noopener nofollow\" target=\"_blank\">DuckDuckGo<\/a>, a website search engine that does not collect information about you.<\/p>\n<p>iOS now has a very useful password auditing feature you can use to ensure that all the passwords you use are different across all your services and devices. The feature is <a href=\"http:\/\/www.applemust.com\/how-to-use-password-auditing-in-macos-mojave-and-ios\/\" rel=\"noopener nofollow\" target=\"_blank\">very easy to use<\/a>.<\/p>\n<p>In brief:<\/p>\n<p>If you care about online privacy, you\u2019ll migrate to more private alternatives to Google. Apple provides lots of these across its ecosystem. Replace Google Docs with Pages, and dump Gmail for Mail, for example. You can also use other secure email providers, such as <a href=\"https:\/\/mailfence.com\/en\/\" rel=\"noopener nofollow\" target=\"_blank\">Mailfence<\/a>.<\/p>\n<p>One good way to prevent rogue apps from uploading data they find about you in your Safari History is to use Private Browsing mode whenever possible.<\/p>\n<p>Access this mode in Safari as follows:<\/p>\n<p>Another Safari feature worth taking control of is its collection of website-related data.<\/p>\n<p>Open\u00a0<em>Settings&gt;Safari&gt;Advanced&gt;Website Data\u00a0<\/em>and you will find a list of all the sites that are gathering such data.<\/p>\n<p>This information includes history, cookies and other browsing data. You can delete this information one item at a time, or tap \u2018Clear\u2019 at the bottom of the window. Alternatively, you can tap <em>Clear History and Website Data\u00a0<\/em>on the <em>Settings&gt;Safari\u00a0<\/em>screen.<\/p>\n<p><strong>NB:\u00a0<\/strong>This will delete information across all your signed in devices.<\/p>\n<p>Go to\u00a0<em>Settings<\/em><em>&gt;<\/em><em>Privacy<\/em><em>&gt;<\/em><em>Advertising<\/em>\u00a0and turn on\u00a0<em>Limit Ad Tracking<\/em>\u00a0in order to make uniquely identification of your iOS device more difficult for location trackers.<\/p>\n<p>You should then tap the Reset Advertising Identifier tool to <a href=\"http:\/\/osxdaily.com\/2013\/02\/01\/reset-advertising-identifier-ios\/\" rel=\"noopener nofollow\" target=\"_blank\">anonymize<\/a> you all over again.<\/p>\n<p>Apple\u2019s mobile operating system does gather some information about you, including your <em>Significant Locations<\/em>.<\/p>\n<p>This data is used to provide you with \u201cuseful location-related information in Maps, Calendar, Photos and more.\u201d<\/p>\n<p>Apple does stress that this information is encrypted and cannot be read by the company.<\/p>\n<p>Despite this reassurance, you can limit this activity in <em>Settings&gt;Privacy&gt;Location Services&gt;System Services <\/em>and then<em> Significant Locations<\/em>, which you can turn off. You can get rid of historically collected data by tapping the <em>Clear History<\/em> button.<\/p>\n<p>You can also take a look at which Apple system services tracking your location in <em>Settings&gt;Privacy&gt;Location Services&gt;System Services<\/em>. Here you can review those able to get this data and disable those you don\u2019t wish to use \u2013 but don\u2019t disable Find My iPhone.<\/p>\n<p>There are so many apps that want to know where you are.<\/p>\n<p>Some of these offer features you may want to use that require this information, other apps have less excuse. You are not the product and you can choose to limit such access whenever you choose.<\/p>\n<p>You can review what permissions you\u2019ve given and to which apps in <em>Settings&gt;Privacy&gt;Location Services<\/em>, where you can assign location permission access to each app.<\/p>\n<p>Ask yourself questions as you do so, for example: Do you ever use Facebook\u2019s Check-in feature? If not, then why are you enabling what many call a <a href=\"http:\/\/www.applemust.com\/this-is-surveillance-warns-apples-tim-cook-in-blistering-eu-privacy-speech\/\" rel=\"noopener nofollow\" target=\"_blank\">surveillance capitalist<\/a> with access to where you are? Limiting access to this data may limit what some apps can do, but the trade-off is privacy \u2013 you can always change it again when you want to use your app.<\/p>\n<p>You know that iMessage conversations in Messages are encrypted, right? SMS conversations are not. How do you <a href=\"http:\/\/www.applemust.com\/how-to-tell-if-your-iphone-message-chat-is-encrypted\/\" rel=\"noopener nofollow\" target=\"_blank\">tell the difference<\/a>? A blue message window means the conversation is encrypted, while green means it is not.<\/p>\n<p>Of course, just because a conversation is encrypted doesn\u2019t mean someone with access to your device is completely unable to get at it. You can reduce this risk in <em>Settings&gt;Messages\u00a0<\/em>where you can change Message History so the communication is deleted after 30-days.<\/p>\n<p>Apple also offers a Messages in iCloud feature. If enabled, your messages will be stored in iCloud, protected by your iCloud password. However, if you also use iCloud Backup your stored messages can be accessed by anyone who gets access to your iCloud account, so if increasing your communication security matters to you then you should disable Messages in iCloud in <em>Settings&gt;iCloud\u00a0<\/em>toggle to off.<\/p>\n<p>Some apps like to access your camera and microphone, as well as Photos and other personal items. It\u2019s pretty clear why this is useful some of the time, but you\u2019d be surprised how many apps request such access even though there\u2019s no clear reason for them to do so. You can check which apps are collecting information for no good purpose in <em>Settings&gt;Privacy, <\/em>where you\u2019ll find sections for<\/p>\n<p>It\u2019s good practise to go through each of these sections and check which apps have access. If you don\u2019t want\/need to use that app, then disable their access.<\/p>\n<p>Most iOS users end up with dozens of apps on their iPhone, many of which they never make use of.<\/p>\n<p>We keep hearing more and more horror stories concerning apps quietly monitoring what we do without overtly asking for permission \u2013 including the <a href=\"https:\/\/www.fastcompany.com\/90304349\/apple-gives-developers-24-hours-to-remove-screen-recording-code-from-their-apps\" rel=\"noopener nofollow\" target=\"_blank\">recent screen recording surveillance scam<\/a> the originators of which claim is \u201cfor your convenience\u201d.<\/p>\n<p>To protect against such apps that surreptitiously grab data about you without you knowing they are doing so, it makes sense to limit which apps you carry with you.<\/p>\n<p>There are two ways to achieve this:<\/p>\n<p>Not only have you now reduced your attack vulnerability, but you\u2019ve also saved yourself a bunch of space which you can fill with your favorite Sneaker Pimps albums.<\/p>\n<p>Some apps exist almost entirely to monitor you and your data. To maximize privacy protection you should at the least avoid installing social media apps such as Facebook or Twitter. Not only can you access both services more securely via your browser, but a look inside <em>Settings&gt;Battery\u00a0Health<\/em> should show you how much energy those apps are using. Why?<\/p>\n<p>The rather excellent <em><a href=\"https:\/\/restoreprivacy.com\/secure-iphone-ipad\/\" rel=\"nofollow\">Restore Privacy<\/a>\u00a0<\/em>website recommends that you remove so many categories of app it\u2019s a little ridiculous, however, if privacy matters to you it\u2019s possible you will follow that advice.<\/p>\n<p>You know what I have to say: I recommend use of Ad Blockers, but implore readers to consider that ads sales models are the only way most of the publications you read stay in business, so I urge you to find a way to support the titles and authors you enjoy. I guess everyone needs to eat from time to time.<\/p>\n<p>Apple also provides its own location-based features. If you don\u2019t want them to affect you, open <em>Settings&gt;Privacy&gt;System Services\u00a0<\/em>and disable Location-Based Alerts, Location-Based Apple Ads and Location-Based Suggestions.<\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3339618\/apple-ios\/how-to-stay-as-private-as-possible-on-apples-ipad-and-iphone.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2019\/01\/mls19_021_iphoneresolutionshabits-100786849-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Jonny Evans| Date: Fri, 08 Feb 2019 09:39:00 -0800<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>Apple <a href=\"https:\/\/www.computerworld.com\/article\/3331953\/mobile-wireless\/we-need-new-privacy-laws-urges-apple-ceo-tim-cook.html\" rel=\"noopener\" target=\"_blank\">believes in your right to privacy<\/a>. Here is some advice on how to use the tools it has given you to protect your privacy on an iOS device.<\/p>\n<h3 class=\"body\"><strong>Use a better passcode<\/strong><\/h3>\n<p>You probably already use a 4-digit passcode, but you can improve that with a 6-digit or alphanumeric code.<\/p>\n<p>You change this in <em>Settings&gt;Touch ID\/Face ID &amp; Passcode<\/em>, select <em>Change Passcode\u00a0<\/em>and then tap the small<em> Passcode Option<\/em>s dialog. <a href=\"https:\/\/www.computerworld.com\/article\/3203244\/apple-ios\/8-reasons-why-you-should-strengthen-your-ios-passcode-today.html\">Alphanumeric codes are harder to decipher<\/a>, just make sure you remember the code.<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3339618\/apple-ios\/how-to-stay-as-private-as-possible-on-apples-ipad-and-iphone.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[10480,10554,714],"class_list":["post-14552","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-ios","tag-mobile","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/14552","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=14552"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/14552\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=14552"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=14552"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=14552"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}