2

I was really thinking is it possible that if a hacker gets bundle id of my app, the hacker can get access to key-chain of the my app ? asak, bundle id are unique and hence it cannot be re-used.

I'm not sharing the keychain. If hacker somehow knows the bundle ID of my app, will hacker be able to access my app's keychain ?

thanks

user1291401
  • 264
  • 1
  • 6
  • 18
  • @Hardik Thakkar,@BIBIN K ONANKUNJU,@Polygnome,@Attersson - easily you guys put it on hold, instead of helping to solve it. – user1291401 Feb 25 '19 at 14:16

1 Answers1

1

No. You have to allow it specifically for which apps are you sharing the keychain.

https://developer.apple.com/documentation/security/keychain_services/keychain_items/sharing_access_to_keychain_items_among_a_collection_of_apps

barbarity
  • 2,420
  • 1
  • 21
  • 29
  • I'm not sharing the keychain. If hacker somehow knows the bundle ID of my app, will hacker be able to access my app's keychain ? – user1291401 Feb 25 '19 at 08:34
  • 1
    No. As I said. Without you explicitly saying you want to share it, he won't get the values – barbarity Feb 25 '19 at 08:37
  • Even if you were sharing the keychain, the hacker would need an app that was associated with your development team – Paulw11 Feb 25 '19 at 09:10
  • @Paulw11 - assuming condition which you mentioned above, den is it possible ? – user1291401 Feb 25 '19 at 09:12
  • 1
    To do that the hacker has to have your Apple ID login to the Apple's developer program and sign an app and get it installed on the device. If they physically have the device and the passcode then they can get the keychain without knowing your bundle id. If they don't physically have the device and the passcode then there is nothing they can do – Paulw11 Feb 25 '19 at 09:15