Pages 3.2 (iOS / App Store)

175x175bb (54)

This application is available for iOS. This app is designed to be a word processor exclusively for iOS. The latest build was released on Jun 13, 2017. Our latest check was performed on Mar 26th, 2017

Findings Summary

Our examination revealed total 11 items, where were 6 DAR items and 5 DIT items found. Among DAR items were found 0 worst items, 3 bad items, 3 good items, and 0 best items. Among DIT items were found 0 worst items, 4 bad items, 1 good item, and 0 best items.

Below you find 2 infographics summarizing what we described above. Each image provides information about both DAR and DIT items.

 

 

This slideshow requires JavaScript.


Everything presented below is related to well-known CWEs, such as Sensitive data leakage [CWE-200], Unsafe sensitive data storage [CWE-312], Unsafe sensitive data transmission [CWE-319]. You can read more about it here.

Now let’s go deeper and examine each data item’s protection level.

 

Application Description

Let’s cite the description of this application below:

Pages is the most beautiful word processor you’ve ever seen on a mobile device. This powerful word processor helps you create gorgeous reports, resumes, and documents in minutes. Pages has been designed exclusively for the iPad, iPhone, and iPod touch with support for Multi-Touch gestures and Smart Zoom.
Get a quick start by using one of over 60 Apple-designed templates. Or use a blank document and easily add text, images, shapes, and more with a few taps. Then format using beautiful preset styles and fonts. And use advanced features like change tracking, comments, and highlights to easily review changes in a document.
With iCloud built in, your documents are kept up to date across all your devices. And with the
release of real-time collaboration, your team will be able to work together at the same time on a Mac, iPad, iPhone, or iPod touch — even on a PC using iWork for iCloud.
Collaborate with others at the same time

  • With the release of real-time collaboration, your whole team can work together on a document at the same time
  • Collaboration is built right in to Pages on the Mac, iPad, iPhone and iPod touch
  • PC users can collaborate too, using Pages for iCloud
  • Share your document publicly or with specific people
  • You can easily see who’s currently in the document with you
  • View other people’s cursors to follow their edits

Get started quickly

  • Choose from over 60 Apple-designed templates to instantly create beautiful reports, resumes, cards, and posters
  • Import and edit Microsoft Word and plain text files using Mail, a WebDAV service, or iTunes File Sharing

Create beautiful documents

  • Write and edit documents using the onscreen keyboard or a wireless keyboard with Bluetooth
  • Format your document with gorgeous styles, fonts, and textures
  • Your most important text formatting options are right in your keyboard, and always just a tap or two away
  • Easily add images and video to your document using the Media Browser
  • Use auto-text wrap to flow text around images
  • Animate data with interactive column, bar, scatter, and bubble charts
  • Organize your data easily in tables

Advanced tools

  • Add bookmarks to easily link from one part of your document to another
  • Turn on change tracking to mark up a document as you edit it
  • Use comments and highlights to share ideas and feedback with others
  • Create footnotes and endnotes and view word counts with character, paragraph, and page counts
  • Automatic list making and spellchecking
  • Create and view impressive 2D, 3D, and interactive bar, line, area, and pie charts
  • Add elegant mathematical equations using LaTeX or MathML notation
  • Use Undo to go back through your previous changes
  • Quickly open password-protected documents using Touch ID

iCloud

  • Turn on iCloud so your documents are automatically available on your Mac, iPad, iPhone, iPod touch, and iCloud.com
  • Access and edit your documents from a Mac or PC browser at http://www.icloud.com with Pages for iCloud
  • Pages automatically saves your documents as you make changes

Share a copy of your work

  • Use AirDrop to send your document to anyone nearby
  • Quickly and easily share a link to your work via Mail, Messages, Twitter, or Facebook
  • Export your document in ePub, Microsoft Word, and PDF format
  • Use “Open in Another App” to copy documents to apps such as Dropbox
  • Print wireleSSLy with AirPrint, including page range selection, number of copies, and two-sided printing

Some features may require Internet access; additional fees and terms may apply.
Pages does not include support for some Chinese, Japanese, or Korean (CJK) text input features such as vertical text.

 

Protection levels.

Locally stored data (Data-at-Rest, DAR).

Locally stored data groups include Media Information, Documents Information, Application Information.
The average DAR value is 5.00 points (7.00 points of system protection and 3.00 points of own protection). It is higher than a typical value (3.5 points, where’s 7 points of system protection and 0 points of own protection).

Items’ GROUP #1 with average value 6.50 points (7 points of system protection, 6 points of own protection) means data protection levels have following definitions. Frankly talking, protection and privacy issues are still possible but might involve interaction with an app code where system protection level means – root/jailbreak is required but not possible without wiping device data, and own protection level means – data is not available in backups.

– Screen Snapshots (‘Media Information’ Group) – Screenshots of your device screen running certain apps; common as an iOS app multitasking feature (app swipes) or browser tab swipes. This data item related to mentioned group meant to be any data like photo, image, video, audio,

– Sync Documents (‘Documents Information’ Group) – Documents synchronized or locally stored on your device as is or converted into another file formats (like.pdf or set of separated jpg file per each .pdf file. This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format,

– Media Data (‘Documents Information’ Group) – Any info like images, audios, videos, media notes, etc. This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format

Items’ GROUP #2 with average value 3.50 points (7 points of system protection, 0 points of own protection) means data protection levels have following definitions. Frankly talking, extra data found that shouldn’t be accessed where system protection level means – root/jailbreak is required but not possible without wiping device data, and own protection level means – stored as is.

– Document Details (‘Documents Information’ Group) – Common info about documents synchronized or stored locally (properties like size, date and time, etc.). This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format,

– Document List (‘Documents Information’ Group) – The list of documents stored local or synchronized over the Internet. This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format,

– Application Configs (‘Application Information’ Group) – Different configuration files created by your app, perhaps app permissions. This data item related to mentioned group meant to be any info related to the app, app settings, including installed apps or installers

Also, keep in mind, using jailbroken device means the system protection level is 0 points and you’re using out-of-date iOS < 8.3 the system protection level is 2 points. If some data marked as shareable via iTunes, then the system protection level is 4 points.

Transferred data (Data-in-Transit, DIT).

Transferred data groups include Documents Information, Account Information, Application Information.
The average DIT value is 4.80 points (5.00 points of system protection and 4.60 points of own protection). It is higher than a typical value (4 points, where’s 4 points of system protection and 4 points of own protection).

Items’ GROUP #1 with average value 4.50 points (5 points of system protection, 4 points of own protection) means data protection levels have following definitions. Frankly talking, data available if it’s allowed only and may require user action where system protection level means – some techniques are available to developers to keep connection bypassing system settings, like proxy settings, etc., and own protection level means – bypassed by fake/stolen root certificates.

– Device Data (‘Documents Information’ Group) – Device ID, Device Name, Device OS Name and Version, and jailbroken/root status. This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format,

– Document Details (‘Documents Information’ Group) – Common info about documents synchronized or stored locally (properties like size, date and time, etc.). This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format,

– Account Data (‘Account Information’ Group) – Basic info about account like name, a list of sub-account (e.g. financial or other) and some linked data like a phone number. This data item related to mentioned group meant to be any info related to profiles, basic credential IDs like email or username or phone number plus some more info depends on applications,

– Application Configs (‘Application Information’ Group) – Different configuration files created by your app, perhaps app permissions. This data item related to mentioned group meant to be any info related to the app, app settings, including installed apps or installers

Items’ GROUP #2 with average value 6.00 points (5 points of system protection, 7 points of own protection) means data protection levels have following definitions. Frankly talking, protection and privacy issues are still possible but might involve interaction with an app code where system protection level means – some techniques are available to developers to keep connection bypassing system settings, like proxy settings, etc., and own protection level means – tricks to bypass sniffing (hardly to be or can’t be patched to bypass), including non-common or unsupported protocols.

– Sync Documents (‘Documents Information’ Group) – Documents synchronized or locally stored on your device as is or converted into another file formats (like.pdf or set of separated jpg file per each .pdf file. This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format

Keep in mind if you’re using out-of-date iOS < 9.0, the system level equals 2 points instead of 4. It means your data can be stolen without involving your actions.

Privacy Policy

Full application privacy policy is available here.

You may find privacy policy details proceeding the link above to compare developer’s vision on data protection with our results.