Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

Secure data wipe built into iPhone Software v2.0

Responding to concerns over the integrity of the iPhone's data reset methods, Apple has taken the extra step and built a more secure data wipe function into the next version of the handset's software, AppleInsider has learned.

People familiar with the beta versions of iPhone Software v2.0 say the upcoming release will employ a more foolproof method of erasing all personal data and settings from an iPhone. As is the case with the existing version of iPhone software, the function will be accessible by selecting Settings > General > Reset > Erase All Contents and Settings.

Unlike today's iPhone software, however, the revised function will wipe data in similar fashion to the "Secure Empty Trash" function of Mac OS X, by which all data is deleted, unlinked, and then overwritten several times to make it irretrievable by even the savviest of recovery tools.

As such, the new function will take considerably longer to complete — about an hour for a typical 8GB iPhone. A progress bar appears during the process. During the data wipe, users should connect their iPhone to its power adapter as the process is believed to be CPU intensive.

The updated functionality arrives following reports that an Oregon State detective was able to successfully retrieve personal data — including emails, photos and financial information — from a refurbished iPhone sold by Apple.

Jonathan Zdziarski, author of the "iPhone Open Application Development,” noted that Apple's existing erase-and-restore function leaves all of a user's personal data "sitting in the unallocated blocks of the iPhone's NAND memory." And there's no viable, publicly available method for erasing the personal data from the Apple handset, he added.


Data reset panel in iPhone Software v1.1.4 on left, v2.0 on right.

The improvements to the iPhone's data wipe will also arrive at a time when masses of original iPhone owners will be attempting clear information from their handsets and resell them to others after upgrading to an iPhone 3G. iPhone software 2.0 will also include among its many enterprise-ready features a function called "remote wipe" that was designed to protect data stored on iPhones by offering a means to remotely wipe them clear in the event that they are lost or stolen.

According to official statements made by Apple during its developers conference earlier this month, as well as this press release, "iPhone 2.0 software will be available on July 11 as a free software update via iTunes 7.7 or later for all iPhone customers." However, a gold master version may be provided to some Apple employees and partners as early as friday.



40 Comments

SpamSandwich 19 Years · 32917 comments

My only question... is this as good, or better than what is offered to Blackberry users?

freeny 18 Years · 128 comments

so if my old iphone locks up after switching to the new phone how will one access this function?...

nofeer 22 Years · 2327 comments

they should also have a "find locate" ability, so when one is stolen, apple or att is notified, a wipe is done and connected to wifi OR network, it's located, and a picture is taken something like they have for the mac/ laptops that would put a big negative for stealing this thing. make this ability part of the os, not just be buying software, that way the "black market" would be minimized. i wish ipods had that ability, when an ipod is stolen, it can be located when connected to itunes

darkopz 16 Years · 1 comment

Maybe someone can explain the Remote Wiping in further detail for me. It seems quite easy to bypass. You take someone's iPhone, crack it open and pull out the SIM chip. Now it is no longer on the network and cannot be remote wiped. This can all be done within minutes of losing your phone. It could be that this feature isn't meant to prevent people from stealing company/personal secrets but rather a feel good way of knowing you might be able to wipe your information should you lose your iPhone. Is my assessment correct that the only connection the iPhone has for remote wiping is through the SIM chip?

[edit]
I realize that the iPhone can connect wirelessly to the internet but that is easily stopped also by turning off wireless access. The only identifying feature of the iPhone would be the MAC address at that point. I think it all sounds great in theory but no where near secure enough to prevent someone from taking secrets off an iPhone. The only plausible secure way would be to encrypt all the data on the iPhone and allow access to the data through a password you enter every time you utilize your iPhone. Then if you lost your iPhone and the encryption was strong enough they would be out of luck. You can't crack strong encryption like you can on TV. Then thief's would need to, once again, resort to Social Engineering to obtaining passwords and information.
[/edit]

Thanks,

Andrew

pg4g 16 Years · 383 comments

Remote wipe is done via the unique code of the phone I believe (the ISDN or whatever it is called) and so even with a new sim, it would still send the same code, and would wipe.