User photos of smartphones and tablets running iOS 8.1 and later versions cannot be removed physically – they remain in iCloud. This was announced by the specialists of the Russian company Elcomsoft. How long “deleted” images are stored in the cloud is unknown, but most old photo discovered by experts that been in iCloud for longer than six months.
We investigated low-level protocols access to the iCloud and released a software product Elcomsoft Phone Breaker 6.0, which is able to upload from iCloud photos taken by the mobile device. It was found that photos that a user has deleted, and which in the album “Recently deleted” it is not visible, in fact, continue to be stored in iCloud and can be retrieved from there”, – quotes the edition D-russia, the head of Elcomsoft, Vladimir Katalov.
As explained by the experts, starting with version iOS 8.1 introduces iCloud photo Library, allowing not immediately remove pictures. After removal they go to the Recently deleted album, and within 30 days user can to recover them. A month later, snapshots are removed, at least so it seems to the user. However, according to experts, Elcomsoft, in fact the photos do not disappear, but remain in iCloud. “They indefinitely continue to be accessible to an indefinite circle of persons, but not its rightful owner,” the expert explained.
According to Katalova, data of Russian users stored in the USA in a rented Apple data centers of Amazon, Microsoft, Google and AT&T. the encryption Keys are stored together with the information, so to access “deleted” photos can be like Apple, and the aforementioned company. In addition, according to the document, describing the interaction of the Apple with the government’s security services, the company shall transfer, upon their request, stored on its servers.
However Elcomsoft experts believe that they discovered a vulnerability is a bug in the software, and not intentionally left bedorom.