Apple Platform Security
- Welcome
- Intro to Apple platform security
- Hardware security and biometrics
-
System security
- System security overview
-
Secure boot
- Boot process for iPad and iPhone devices
- Memory safe iBoot implementation
- Mac computers with Apple silicon
- Intel-based Mac computers
- Signed system volume security
- Secure software updates
- Background Security Improvements
- Operating system integrity
- Device pairing and connection security
- BlastDoor for Messages and IDS
- Lockdown Mode security
- Overview of additional macOS system security capabilities
- System security for watchOS
- Random number generation
- Communicating emergency information using satellites
- Apple Security Research Device
-
Encryption and Data Protection
- Encryption and Data Protection overview
- Quantum-secure cryptography with Apple devices
- Passcodes and passwords
- Data Protection
- FileVault
- How Apple protects users personal data
- Digital signing and encryption
-
App security
- App security overview
- App code signing process
- App security in iOS, iPadOS, and visionOS
- App security in macOS
- Supporting extensions
- Secure features in the Notes app
- Secure features in the Shortcuts app
-
Services security
- Services security overview
- Apple Accounts and Managed Apple Accounts
- iCloud
- Passcode and password management
-
Apple Pay
- Apple Pay security overview
- Apple Pay component security
- How Apple Pay keeps users purchases protected
- Credit, debit, and prepaid cards
- Payment authorization with Apple Pay
- Paying with cards using Apple Pay
- Contactless passes in Apple Pay
- Rendering cards unusable with Apple Pay
- Apple Card security
- Apple Cash security
- Tap to Pay on iPhone
- Using Apple Wallet
- iMessage
- Secure Apple Messages for Business
- FaceTime security
- SharePlay security
- Nearby sharing security
- Find My
- Continuity
- Network security
- Developer kit security
-
Secure device management
- Secure device management overview
- Device management
- Apple Configurator security
- Screen Time security
- Glossary
- Document revision history
- Copyright and trademarks
[]Secure features in the Shortcuts app
In the Shortcuts app, shortcuts are optionally synced across Apple devices using iCloud. Shortcuts can also be shared with other users through iCloud. Shortcuts are stored locally in an encrypted format.
Custom shortcuts are versatiletheyre similar to scripts or programs. When downloading shortcuts from the internet, the user is warned that the shortcut hasnt been reviewed by Apple and is given the opportunity to inspect the shortcut. To protect against malicious shortcuts, updated malware definitions are downloaded to identify malicious shortcuts at runtime.
Custom shortcuts can also run user-specified JavaScript on websites in Safari when invoked from the share sheet. To protect against malicious JavaScript that, for example, tricks the user into running a script on a social media website that harvests their data, the JavaScript is validated against the aforementioned malware definitions. The first time a user runs JavaScript on a domain, the user is prompted to allow shortcuts containing JavaScript to run on the current webpage for that domain.
Published Date: February 18, 2021