{"action":"closed","issue":{"url":"https://api.github.com/repos/xamarin/Xamarin.Auth/issues/305","repository_url":"https://api.github.com/repos/xamarin/Xamarin.Auth","labels_url":"https://api.github.com/repos/xamarin/Xamarin.Auth/issues/305/labels{/name}","comments_url":"https://api.github.com/repos/xamarin/Xamarin.Auth/issues/305/comments","events_url":"https://api.github.com/repos/xamarin/Xamarin.Auth/issues/305/events","html_url":"https://github.com/xamarin/Xamarin.Auth/issues/305","id":336547839,"node_id":"MDU6SXNzdWUzMzY1NDc4Mzk=","number":305,"title":"Prevent keychain data from being included in back-ups using kSecAttrAccessible constants","user":{"login":"HelenMamalaki","id":4314194,"node_id":"MDQ6VXNlcjQzMTQxOTQ=","avatar_url":"https://avatars3.githubusercontent.com/u/4314194?v=4","gravatar_id":"","url":"https://api.github.com/users/HelenMamalaki","html_url":"https://github.com/HelenMamalaki","followers_url":"https://api.github.com/users/HelenMamalaki/followers","following_url":"https://api.github.com/users/HelenMamalaki/following{/other_user}","gists_url":"https://api.github.com/users/HelenMamalaki/gists{/gist_id}","starred_url":"https://api.github.com/users/HelenMamalaki/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/HelenMamalaki/subscriptions","organizations_url":"https://api.github.com/users/HelenMamalaki/orgs","repos_url":"https://api.github.com/users/HelenMamalaki/repos","events_url":"https://api.github.com/users/HelenMamalaki/events{/privacy}","received_events_url":"https://api.github.com/users/HelenMamalaki/received_events","type":"User","site_admin":false},"labels":[{"id":1044481261,"node_id":"MDU6TGFiZWwxMDQ0NDgxMjYx","url":"https://api.github.com/repos/xamarin/Xamarin.Auth/labels/assigned%20engineer","name":"assigned engineer","color":"bc039a","default":false},{"id":1040748128,"node_id":"MDU6TGFiZWwxMDQwNzQ4MTI4","url":"https://api.github.com/repos/xamarin/Xamarin.Auth/labels/needs%20investigation","name":"needs investigation","color":"d1f9a9","default":false}],"state":"closed","locked":false,"assignee":{"login":"moljac","id":1768576,"node_id":"MDQ6VXNlcjE3Njg1NzY=","avatar_url":"https://avatars2.githubusercontent.com/u/1768576?v=4","gravatar_id":"","url":"https://api.github.com/users/moljac","html_url":"https://github.com/moljac","followers_url":"https://api.github.com/users/moljac/followers","following_url":"https://api.github.com/users/moljac/following{/other_user}","gists_url":"https://api.github.com/users/moljac/gists{/gist_id}","starred_url":"https://api.github.com/users/moljac/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moljac/subscriptions","organizations_url":"https://api.github.com/users/moljac/orgs","repos_url":"https://api.github.com/users/moljac/repos","events_url":"https://api.github.com/users/moljac/events{/privacy}","received_events_url":"https://api.github.com/users/moljac/received_events","type":"User","site_admin":false},"assignees":[{"login":"moljac","id":1768576,"node_id":"MDQ6VXNlcjE3Njg1NzY=","avatar_url":"https://avatars2.githubusercontent.com/u/1768576?v=4","gravatar_id":"","url":"https://api.github.com/users/moljac","html_url":"https://github.com/moljac","followers_url":"https://api.github.com/users/moljac/followers","following_url":"https://api.github.com/users/moljac/following{/other_user}","gists_url":"https://api.github.com/users/moljac/gists{/gist_id}","starred_url":"https://api.github.com/users/moljac/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moljac/subscriptions","organizations_url":"https://api.github.com/users/moljac/orgs","repos_url":"https://api.github.com/users/moljac/repos","events_url":"https://api.github.com/users/moljac/events{/privacy}","received_events_url":"https://api.github.com/users/moljac/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2018-06-28T09:41:03Z","updated_at":"2018-10-30T03:00:13Z","closed_at":"2018-10-30T03:00:13Z","author_association":"NONE","body":"# Xamarin.Auth Issue\r\n\r\n### Feature description\r\n\r\nI would like the ability to select a more secure keychain configuration using the kSecAttrAccessible constants (e.g. \"kSecAttrAccessibleWhenPasscodeSetThisDeviceOnly\"). \r\n\r\nThe current default accessibility setting used in Xamarin.Auth is \"kSecAttrAccessibleAfterFirstUnlock\" which allows data in the keychain to be included in backups whose encryption is not offered the protection of the devices UDID (to allow data to be migrated between devices). Back up data is vulnerable to brute-force attack, the ease of which is determined by the strength of the password set by the user for accessing backups. \r\n\r\nThe requirements of the app I am working on are such that keychain data should not be stored in back-ups. Furthermore keychain data only needs to be accessible when the app is in the foreground whereas the current configuration makes keychain data available when the app is backgrouded with the screen locked.\r\n"}}
{"actor":{"display_login":"Redth"}}