ble 设置固定的pin码
When compared to its rival Android, iOS has always had a better reputation in security and privacy terms, becoming a highlight in all Apple marketing campaigns. This security is also grounded in the system restrictions, since Apple keeps a very strict control over what you can do with your phone, something that Android fans always criticize about iOS.
与竞争对手Android相比,iOS在安全性和隐私性方面一直享有较高的声誉,成为所有Apple营销活动中的亮点。 这种安全性还基于系统限制,因为Apple对您的手机可以执行的操作保持非常严格的控制,而Android爱好者一直批评iOS。
Nevertheless, there have been a lot of security issues during the 12 years of iPhone history, so as users, we have to stay alert. With the following 10 tips, your iPhone and the data inside it will be much more secure against hacking attempts, so take note!
不过,在iPhone的12年历史中,仍然存在很多安全问题,因此作为用户,我们必须保持警惕。 使用以下10个技巧,您的iPhone及其内部数据将更安全地防止黑客入侵,因此请注意!
1.设置非固定长度的PIN码 (1. Set a non-fixed length PIN)
FaceID or TouchID are super convenient ways of seamlessly unlocking your iPhone. However, we need to set a PIN or password for unlocking the phone after rebooting, or if the face or fingerprint authentication fail. Moreover, this PIN or password is also used for encrypting all the sensitive data inside your phone, so we have to choose a secure one. Most of the people use a 4 or 6 digits PIN, which leads to 10,000 or 1,000,000 possible combinations respectively
FaceID或TouchID是无缝解锁iPhone的便捷方法。 但是,我们需要设置PIN或密码,以便在重启后或面部或指纹认证失败时解锁手机。 此外,此PIN或密码还用于加密手机中的所有敏感数据 ,因此我们必须选择一个安全的数据。 大多数人使用4或6位PIN码,分别导致10,000或1,000,000种可能的组合

We can do things better by setting a non-fixed length code. In Settings > Code > Set new code, choose “Custom numeric code”, and type a PIN with your desired length. This way, if someone tries to unlock your phone, they won’t know the actual length, which leads to infinite possible codes, making your phone more secure.
通过设置非固定长度代码,我们可以做得更好。 在设置>代码>设置新代码中 ,选择“ 自定义数字代码 ”,然后输入所需长度的PIN码。 这样,如果有人尝试解锁您的手机,他们将不知道实际长度,这将导致无限可能的密码 ,从而使您的手机更加安全。
2.在锁屏上禁用Hey Siri和Siri (2. Disable Hey Siri and Siri on lockscreen)
Siri is that smart voice who lives inside your iPhone and can do a lot of things for you. She’s smart, but not so smart to know if who is speaking to her is the phone owner or a stranger. In the past some security flaws were found in this personal assistant, allowing a stranger to get access into your photo gallery, your contact list and other sensitive content.
Siri是驻留在您的iPhone中的智能语音,可以为您做很多事情。 她很聪明,但不知道与谁说话的人是电话的拥有者还是陌生人 。 过去,此私人助理中发现了一些安全漏洞 ,使陌生人可以访问您的照片集,联系人列表和其他敏感内容。

The best way to avoid problems is disabling Siri on the lockscreen (Settings > Code > Allow on Lockscreen…), as well as the always-listening Hey Siri feature, since it’s not difficult to cheat Siri after a couple of tries imitating the voice of the owner. This won’t affect to how you use Siri, since she’ll be always available by just pressing a button.
避免问题的最佳方法是在锁屏上禁用Siri( “设置”>“代码”>“在锁屏上允许 ...”),以及始终听着Hey Siri的功能,因为经过几次尝试模仿Siri声音后,欺骗Siri并不困难主人。 这不会影响您使用Siri的方式,因为只需按一下按钮就可以随时使用Siri。
3.不要越狱你的iPhone (3. DO NOT jailbreak your iPhone)
My first iOS device was an iPod touch back in 2010, with iOS 4, an operating system very restricted when compared to Android. All those restrictions could be erased by doing jailbreak, a hacking process that allowed the installation of apps and tweaks not authorized by Apple, in order to customize the behavior of your phone.
我的第一台iOS设备是2010年推出的iPod touch,带有iOS 4,与Android相比,该操作系统的使用受到很大限制。 所有这些限制都可以通过执行越狱程序来消除, 越狱程序是一种黑客程序,该程序允许安装未经Apple授权的应用程序和调整项,以自定义手机的行为。
Despite had being a big fan of jailbreaking some years ago, nowadays I think it’s useless, since iOS has become a very powerful and less restrictive system. In addition, in the moment you jailbreak your iPhone, you lose control over what’s happening inside your phone, because you are bypassing all Apple security systems and trusting your security to unknown developers, exposing all your photos, contacts, messages, online credentials and more to cybercriminals.
尽管几年前一直是越狱的忠实拥护者,但如今,我认为它已无用,因为iOS已成为功能非常强大且限制较少的系统。 此外,在越狱iPhone的那一刻,您将失去对手机内部事件的控制,因为您绕过了所有Apple安全系统,并将安全性交给了未知的开发人员 ,从而暴露了所有照片,联系人,消息,在线凭据等网络犯罪分子。
4.不要安装侧面加载的应用 (4. DO NOT install sideloaded apps)
The App Store is the official place for downloading apps to your iOS devices. All the apps have been verified by Apple, and whenever the company detects some problem related to privacy or security, they delete the app immediately from the store. Nonetheless, this is not the unique way of installing apps into your iPhone. From Internet you can download apps as you would do in your computer. This is called sideloading, and it’s the only way to download apps not approved by Apple, usually related with content piracy, gambling or retro games emulation.
App Store是将应用程序下载到iOS设备的官方场所。 所有应用程序均已通过Apple验证 ,一旦公司检测到与隐私或安全性相关的问题,就会立即将其从商店中删除。 尽管如此,这并不是将应用程序安装到iPhone中的唯一方法。 从Internet上,您可以像在计算机上一样下载应用程序。 这就是所谓的sideloading ,这是下载未经Apple认可的应用程序的唯一方法,通常与内容盗版,赌博或复古游戏仿真有关。
Despite this apps still run on the same “sandbox” (isolated environment) as the ones downloaded from App Store, they haven’t been verified by Apple, meaning that they can affect your privacy or security in unexpected ways, or even replace a legitimate app in your phone without your noticing, in order to steal your data.
尽管此应用程序仍与从App Store下载的应用程序在相同的“沙盒”(隔离环境)上运行,但尚未经过Apple的验证,这意味着它们可能以意想不到的方式影响您的隐私或安全 , 甚至取代了合法的手机中的应用程序,而不会引起您的注意,以窃取您的数据。
5.保持您的iPhone最新 (5. Keep your iPhone up to date)
This is one of the most repeated and known security tips, not only for iPhone, but for any mobile or desktop platform. If you’ve heard it 1000 times, now it’s 1001: always update your phone. Private security companies and hackers are always looking tirelessly for flaws in every operating system, application or hardware device.
这不仅是iPhone的安全问题,也是任何移动或台式机平台最常见的安全问题之一。 如果您听过1000次,那么现在是1001:请始终更新手机 。 私人安全公司和黑客一直在不懈地寻找每个操作系统,应用程序或硬件设备中的缺陷。

Updating your phone is like getting a vaccine against a virus. Whenever an exploit is found and Apple is notified, they patch it with an OTA update you can easily install from your iPhone. However, if you don’t install it, your phone will be exposed to attacks by someone who can exploit that vulnerability.
更新手机就像购买抗病毒疫苗。 每当发现漏洞并通知Apple时,他们都会使用OTA更新对其进行修补,您可以从iPhone轻松安装。 但是, 如果您不安装它,那么您的手机将受到可以利用此漏洞的人的攻击。
6.在您的iCloud帐户上启用2FA (6. Enable 2FA on your iCloud account)
iCloud is the name for the Apple cloud services for iPhone, iPad and Mac users. Most of the iPhone users use iCloud for backing up their phones, as well as having their photo library online, so they can sync their pictures across their devices and afford storage. The more we rely on iCloud, the more we have to protect our account, since the data inside it is more delicate.
iCloud是iPhone,iPad和Mac用户的Apple云服务的名称。 大多数iPhone用户使用iCloud备份手机以及将照片库联机,因此他们可以在设备上同步图片并提供存储空间。 我们越依赖iCloud,就越需要保护我们的帐户 ,因为其中的数据更加精致。

In the past a lot of celebrities got their iCloud accounts hacked by a social engineering attack, receiving an email from an impostor claiming to be Apple and asking them their iCloud credentials for fixing some security issues. This technique has a high success rate, and can expose all your private data. By enabling 2-factor authentication in your iCloud account, if somebody tries to log in with our username and password, they’ll be asked to additionally input a 6-digit code that you’ll receive immediately in all our devices, preventing them to get into your sensitive data. In this Apple support guide you can find how to enable it.
过去,许多名人的iCloud帐户遭到了社会工程学攻击而被黑客入侵,收到了自称是Apple的冒名顶替者的电子邮件,并要求他们提供iCloud凭据来解决一些安全问题。 此技术具有很高的成功率,并且可以公开您的所有私人数据。 通过在您的iCloud帐户中启用2因子身份验证 ,如果有人尝试使用我们的用户名和密码登录,则会要求他们另外输入6位数代码,您将在我们所有的设备上立即收到该代码,以防止他们进行进入您的敏感数据。 在此Apple支持指南中,您可以找到如何启用它。
7.避免公共WiFi (7. Avoid public WiFi)
You’ve also probably heard this piece of advice hundreds of times, and believe me, that’s because is very important. In public WiFi spots, especially those without password, other users can listen to your network traffic, with all the risks this implies. Despite 99% of the webs and apps we use rely on encrypted connections (HTTPS, TLS and so on), a stranger can still know what webs we’re visiting, or even through Man in the Middle attacks redirect us to a fake website appearing to be the one we want to visit, allowing him to steal our credentials. So remember, use always mobile data, and just trust your house or your friends’ WiFi networks.
您可能也已经听过数百次这样的建议,请相信我,因为这很重要。 在公共WiFi场所 ,尤其是没有密码的场所 , 其他用户可以收听您的网络流量 , 这带来了所有隐患 。 尽管我们使用的网站和应用程序中有99%依赖于加密连接(HTTPS,TLS等),但陌生人仍然可以知道我们正在访问的网站,甚至通过中间人攻击也可以将我们重定向到出现的虚假网站成为我们要访问的人,让他窃取我们的凭据。 因此请记住,请始终使用移动数据 ,并且只信任您的房屋或朋友的WiFi网络。
8.禁用街道上的WiFi和蓝牙连接 (8. Disable WiFi and Bluetooth connections on the street)
Another risk of using public WiFis is that we can be tracked by the owner of this network. This actually happens in some malls, exhibition halls or airports, where they use this data to understand the behavior of the users, which usually leads to privacy abuses. However, despite you don’t connect to these networks, you can still be somehow tracked, since when your WiFi or Bluetooth antennas are on, they’re emitting small data packages that can identify your phone.
使用公共WiFi的另一个风险是该网络的所有者可以跟踪我们。 这实际上发生在某些购物中心,展览厅或机场,他们使用这些数据来了解用户的行为 ,这通常会导致隐私滥用。 但是,尽管您没有连接到这些网络,但仍可以以某种方式跟踪您,因为当您的WiFi或蓝牙天线打开时,它们会发出可识别您手机的小数据包 。
The solution is as easy as to disable both WiFi and Bluetooth connections whenever you’re not using them. You can do it from your iPhone settings, or from the Control Center. However, when you do it from the Control Center, your antennas are still on, in order to provide you some basic services such as accurate location, AirDrop and so on, what could still lead to some tracking. If you want to turn off WiFi and Bluetooth completely, I recommend you to turn them off from the Settings app.
该解决方案很容易, 只要不使用它们就禁用WiFi和蓝牙连接 。 您可以从iPhone设置或控制中心进行操作。 但是,当您从控制中心进行操作时,天线仍处于打开状态,以便为您提供一些基本服务,例如准确的位置,AirDrop等,仍然可能导致某些跟踪。 如果您想完全关闭WiFi和蓝牙 ,建议您在“设置”应用中将其关闭。
9.注意VPN (9. Be careful with VPNs)
A VPN, acronym for Virtual Private Network, is an encrypted point-to-point tunnel across which all your Internet data flows. VPNs have hundreds of useful applications: visiting foreign webpages banned in your country, accessing to your office intranet, avoid being tracked by your Internet provider… In the App Store there are a lot of apps providing VPN functionality, much of them for free.
VPN ( Virtual Private Network , 虚拟专用网)的缩写,是一个加密的点对点隧道,您的所有Internet数据都在该隧道上流动。 VPN有数百种有用的应用程序:访问您所在国家/地区禁止访问的外国网页,访问您的办公室内部网,避免被Internet提供商跟踪……在App Store中,有许多应用程序提供VPN功能,其中许多是免费的。
However, when you connect to a VPN, the provider of this service can listen to all your Internet traffic, as it happens when you connect to a public WiFi. A lot of free VPNs have being accused of abusive behaviors like this, so if you need to use a VPN, be careful about which one you use, and ensure it has enough good reviews from trusted sources.
但是,当您连接到VPN时, 此服务的提供者可以侦听您的所有Internet流量 ,就像您连接到公共WiFi时一样。 许多免费的VPN都被指控具有这种滥用行为,因此,如果您需要使用VPN,请谨慎使用哪个VPN,并确保其具有可信任来源的足够好评。
You should also check out that your iPhone is not connected to a VPN without your permission: in Control Center, in the top left side, next to your mobile provider, check if there is a VPN symbol. If it’s there and you don’t know why, go to Settings > General > VPN, check which app is connecting you to a VPN without you knowing and uninstall it immediately.
您还应检查是否未经您的许可未将iPhone连接到VPN :在“控制中心”左上角,移动提供商旁边,检查是否有VPN符号 。 如果不知道原因,请转到“设置”>“常规”>“ VPN” ,检查哪个应用程序在您不知道的情况下将您连接到VPN,然后立即将其卸载。

10.使用自己的充电器 (10. Use your own charger)
Such an innocent device as a phone charger can be tricked to hack your phone and steal your data. Despite it might sound like sci-fi, a lot of “poisoned” charging plugs and cables have been developed, as the one shown in this post, so be careful when borrowing a charger from someone else, especially in public places like coffee shops or restaurants.
诸如电话充电器之类的无辜设备可能会被欺骗来窃取您的电话并窃取您的数据 。 尽管听起来像科幻小说,但已开发出许多“中毒”的充电插头和电缆,如本文所显示的那样 ,因此在向他人借用充电器时要特别小心,尤其是在咖啡店或咖啡厅等公共场所。餐馆。
In addition, if you plug your iPhone into a charger and you see a message asking if you want to trust this computer, this means the charger has been tampered, and a smart board is trying to access your phone’s personal data, so unplug it immediately and look for another charger. Another tip is to go to Settings > Code and check “USB accessories” is disabled.
此外,如果您将iPhone插入充电器,然后看到一条消息,询问您是否要信任此计算机 ,这意味着充电器已被篡改,并且智能板正在尝试访问手机的个人数据,因此请立即拔出插头并寻找另一个充电器。 另一个提示是转到“设置”>“代码”,然后检查“ USB附件 ”是否已禁用。
As you see, with this 10 easy tips you can have a much more secured iPhone, and prevent hackers from accessing into all your personal data. However, remember that absolute security doesn’t exist, so the best security tip I can give you to protect all your electronic devices is to apply common sense.
如您所见,通过这10个简单技巧,您可以拥有更加安全的iPhone,并防止黑客访问您的所有个人数据。 但是,请记住,绝对安全性并不存在,因此,我能为您提供保护所有电子设备的最佳安全性提示是应用常识 。
翻译自: https://medium.com/macoclock/10-tips-to-improve-your-iphone-security-570b6d245c76
ble 设置固定的pin码