> Malware could steal passwords, encrypted messages and contacts
Does this include 1password passwords? As far as I understand 1password encrypts the passwords and they can only be accessed either by supplying the master password or the fingerprint.
Does this include 1password passwords? As far as I understand 1password encrypts the passwords and they can only be accessed either by supplying the master password or the fingerprint.
But 1password is not in the default list of apps to steal (https://googleprojectzero.blogspot.com/2019/08/implant-teard...), so you'd have to know what commands their server sent to get a definitive answer. Most likely they didn't bother, as it seems more like a surveillance / monitoring operation than for financial gain, but then again attackers are getting more sophisticated all the time.
It's definitely stored for Touch ID/fingerprint 1password access though (https://support.1password.com/touch-id-security-ios/).
One of their employees wrote about it here: https://discussions.agilebits.com/discussion/106629/ios-secu.... His response is basically that OS-level 0days aren't in their threat model, so they're continuing their usual bug-fixing routine. And it's true, nothing can really stop a rootkit from sniffing passwords as they're being used, besides winning the anti-rootkit race. Perhaps 1password could have a little more explanation of the insecurity of using Touch ID / Face ID though rather than simply saying it's as secure as possible.