UIApplication-UIID
UIApplication-UIID copied to clipboard
UIID is not kept to a single device
This could very well be dead code at this point but I wanted to let the author (and anyone using it know) that we found a bug were we saw multiple devices reporting the same UIID from this library.
The problem is here. https://github.com/akisute/UIApplication-UIID/blob/3bd8e2117853c6912dad13e4eb2683cdc2c82c00/UIApplication%2BUIID.m#L142
The use of kSecAttrAccessibleAfterFirstUnlock
allows a backup of the device to be used on a new device and this keychain entry will be restored on the new device. Then you have 2 devices reporting the same ID. The attribute kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly
should be used instead which restricts this keychain entry to only this device even through backup/restore.
Sorry for being late (yeah the project is pretty much dead anyway), but yeah you're exactly right! Thanks for pointing it out. I believe what I was thinking not to use kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly
is, perhaps I wanted to let people migrate the UIID through a backup so that they keep their ID... well I can't remember anymore though. Thanks again, anyway!