[jakebasile]

> Security is critical on iOS as some apps have the ability to log you in or restore a session without any sort of credential check. This is despite the fact that unique device identifiers are not supposed to be used by devs.

I've noticed this before. How is that possible?

[chatmasta]

Some apps with persistent "anonymous" logins save an identifier to the keychain and sync it with iCloud so that it persists between installations and across devices.

[Operyl]

iCloud Keychain. https://stackoverflow.com/questions/33775569/how-to-sync-key...

[eecc]

OAuth2 token authentication?