UIApplication-UIID icon indicating copy to clipboard operation
UIApplication-UIID copied to clipboard

UIID is not kept to a single device

Open SlashDevSlashGnoll opened this issue 4 years ago • 1 comments

This could very well be dead code at this point but I wanted to let the author (and anyone using it know) that we found a bug were we saw multiple devices reporting the same UIID from this library.

The problem is here. https://github.com/akisute/UIApplication-UIID/blob/3bd8e2117853c6912dad13e4eb2683cdc2c82c00/UIApplication%2BUIID.m#L142

The use of kSecAttrAccessibleAfterFirstUnlock allows a backup of the device to be used on a new device and this keychain entry will be restored on the new device. Then you have 2 devices reporting the same ID. The attribute kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly should be used instead which restricts this keychain entry to only this device even through backup/restore.

SlashDevSlashGnoll avatar Jun 11 '20 17:06 SlashDevSlashGnoll