Costin G. Raiu, head of the global research and analysis (GReAT) team at computer security company Kaspersky Lab, expressed doubts about Apple's newly launched iCloud service in terms of security and privacy. "I think today it is completely unwise to offer this type of service," Raiu said in a statement released by the company.Below read the full statement drafted by Raiu himself.
Source: Terra"Following Apple's launch of iCloud for developers, the battle to dominate the market for cloud-centric operating systems has finally erupted. Of course, the real key point in this is iOS5, Apple's new operating system that will make the most of using the cloud. This indicates that Apple is moving in the same direction as Google and Microsoft in designing and planning the implementation of an operating system that is fully integrated with the cloud. What's more, Steve Jobs' statement about Apple's interest in creating an operating system that doesn't rely on the local file storage system reaffirms this conclusion.
And what does this mean from a security standpoint? We're basically talking about the same kind of risks inherent in ChromeOS (Google's operating system). All your digital content may be accessible to anyone who knows your password. I think nowadays it is completely unwise to offer this type of service without two-factor authentication, otherwise the service becomes prone to basic data theft techniques.
Of course, even if security is actually enhanced with multi-factor authentication methods, it doesn't change the fact that all information is available in the cloud, in one place. Just as Sony just learned recently, the cloud isn't always impenetrable. On the contrary, its fundamental nature makes it an interesting target for cybercriminals, and they will undoubtedly remain focused on violating it.
- Publicidad -In the hypothetical case that both the cloud and the customer's device were 99.99% secure, there is still another vulnerability: the network that will communicate, send, receive and authenticate customers. From this point of view, we could face a new outbreak of attacks at the network layer, where user information can be intercepted, falsified, denied or distorted. Therefore, we will be able to witness new and more sophisticated attacks in this area."

