Reputation:
i'm writing an iphone application with an authentication page, where the end user puts his credentials.
I know that the iphone keeps traces of the keyboard strokes & i would like to reset the keyboard cache in order to prevent from hackers to dump the memory and reveal the user credentials.
Any suggestions? sample code reference can help me.
Thanks, EfiJ.
Upvotes: 0
Views: 1079
Reputation: 126135
As far as I know password fields don't store their inputs in the keyboard cache.
Upvotes: 1
Reputation: 91585
This seems like an extreme measure for a theoretical attack. Exactly how many keyboard cache dumps have resulted in security breaches on the iPhone to date? If you can't answer that question then there is a good chance you're wasting development time "chasing zebras".
Security is important, but if something like this isn't stated in the Apple security guidelines, it can probably deemed overkill. Especially if Apple doesn't worry about it in iTunes Store or the App Store.
Upvotes: 1