Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Wow never heard of the embedded secret key on you iOS keychain after you uninstalled the app. Is this legal to fingerprint your AppleID like this?? Can you view your iOS keychain and wipe any fingerprinting bs apps leave behind or feed them poisoned data to dissociate your AppleID?


No, there’s no way for you to view it. Apps can spin up a new keychain that iCloud will sync and you can put arbitrary strings in there. The user has no idea.

I’ve used it myself to persist auth tokens.


That’s nuts thanks for the info, I hope this becomes a bigger topic of discussion on HN




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: