HackerTube.dev

Behind the Scenes of iOS Security

Black Hat · 126.9K views · 2016-08-16 · 51:32

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain. He explains key hierarchies and how data can stay safe even in adversarial clouds.

On Hacker News

HN repeatedly recommends it as the deepest public look at how iCloud Keychain and Apple's device and cloud security are designed.

Recommended by 9 HN people across 11 months · HN mentions 2016–2026

Topics

Security & hackingCryptographyConsumer devices & gadgets
Search by tags
ios securityicloud keychainsecure enclavecloud key vaultblack hat

What people said

eddyg · 2026-01 · Strong recommendation

You shouldn't include Apple in this. As of macOS Tahoe, the FileVault key you (optionally) escrow with Apple is stored in the iCloud Keychain, which is cryptographically secured by HSM-backed, rate-limited protections. You can (and should) watch [VIDEO] for all the details about how iCloud is protected.

Read the original HN comment ↗
eddyg · 2026-01 · Strong recommendation

Which is a very good thing. iCloud is much more secure than most people realize because most people don’t take the 30 minutes to learn how it is architected. You can (and should) watch [VIDEO] for all the details about how iCloud is protected, but especially the time-linked section. :)

Read the original HN comment ↗
jesseendahl · 2025-07 · Strong recommendation

This is not just encryption in transit or simplistic client-side encryption. It is end-to-end encryption, where each device's key generation is handled by your phone's Secure Enclave. This article is a decent starting point in terms of what Advanced Data Protection is: [LINK] If you want a deeper dive into the security engineering of iCloud Keychain, the second half of this Blackhat talk by Apple's head of Security Engineering & Architecture (SEAR) is really great: Synchronizing secrets: [VIDEO]

Read the original HN comment ↗

Sources

Video by Black Hat, played through YouTube.

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks
  • SaaS & AI candidates: Topic keywords do not match
  • Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources