Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Under iOS 11, authorities won’t be able to image your device without a passcode

arstechnica.com

Post reply on HN
Print view View original

271–280 of 296 posts

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#271

Post by willstrafach »

zimpenfish wrote: post #263
HugoDaniel wrote: post #262

Earlier quoted context omitted.

"Apple encrypts End-to-end all iMessage chats, as well as FaceTime (VoIP) calls." End-to-end encryption does not guarantee that Apple keeps your data encrypted, or that they don't process it for 3rd parties (NSA would fit as a 3rd party, where Apple would be for them a content provider, as the slide shows). "You can bet your ass their arm was twisted by the government or they were taken into the program unknowingly (…

> End-to-end encryption does not guarantee that Apple keeps your data encrypted I'm probably misunderstanding something here but doesn't "end-to-end encryption" mean that A encrypts it with B's key and [whoever is in the middle passing it along] can't decrypt it because they don't have B's key?

You are not misunderstanding, you are correct.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#272

Post by willstrafach »

dataangel wrote: post #50

With it being such a closed platform, what are the odds this is actually true? There's no way to verify that they don't have a skeleton key.

I regularly reverse engineer components of iOS and have done so since the first iPhone was released. Never seen anything like a "skeleton key" and there is certainly nothing like that in place now.

Starting at iOS 10, firmware components have not been encrypted (obfuscated), so you or anyone else can also reverse engineer it.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#273

Post by komali2 »

lern_too_spel wrote: post #266
pdimitar wrote: post #264

Earlier quoted context omitted.

Sure. That's why Magisk exists, right? Because OEMs have nothing against you rooting your device. At all. They are perfectly okay with it. Please. Actions speak louder than words, I am sure you would agree with that.

We were discussing Google devices and Apple devices. All Google phones have an unlockable bootloader.

By google devices, do you mean only the Pixel and Nexus phones? Or does that include all android devices? Because for example Sprint Galaxy s5's can't be unlocked.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#274

Post by komali2 »

vacri wrote: post #114
eridius wrote: post #70

Earlier quoted context omitted.

> What data does Google collect that Apple doesn't collect? I don't know what Google collects, but the simple answer to this is "virtually everything". Apple collects very little data from their users and does everything they possibly can on-device (and the stuff that requires the cloud is either encrypted or heavily anonymized). Nearly all data that Google collects, Apple doesn't.

On the other hand, Android services everyone, whereas Apple tells the developing world to fuck off. Apple's privacy is only for the social elite who can afford their expensive toys, and they're not interested in providing service on a global scale. Let's not get too hippy-feelgood about Apple's intentions regarding its users here.

Well hold on dude, are you arguing that it's not Apple's right to charge money for quality / service?

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#275

Post by mikeash »

dkonofalski wrote: post #270
mikeash wrote: post #152

Earlier quoted context omitted.

Apple's checks are not very deep. They suffice to keep honest people honest but do little against an actual adversary.

The number of safeguards they have in place make that a moot point. If it's not discovered in testing, it's sandboxed. If it gets past the sandbox, they have a killswitch that's registered to the app's specific ID. There's very little damage that an app can do if it's gone through the App Store proper.

That could be done for sideloaded apps too.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#276

Post by StavrosK »

tinus_hn wrote: post #232
StavrosK wrote: post #214

Earlier quoted context omitted.

Not being able to unlock your phone or sideload programs. I don't accept the "we know what's best for you" argument. They could have allowed jailbreaking and added huge warnings.

Apple allows you to 'sideload' apps as long as you get a (free) developer account.

Can I just download an IPA from a website and install it on my phone if I have a developer account?

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#277

Post by StavrosK »

braythwayt wrote: post #219
StavrosK wrote: post #216

Earlier quoted context omitted.

"Every society that has been allowed to drive cars has had car accidents." I know the risks, I want to do it anyway. I don't want a nanny over my head.

That may be a better analogy than you intend. The problem with cars is that everyone suffers the consequences of your driving. In fact, you may have the least exposure to the carbon monoxide, pollution, or even accident risk. Pedestrians, cyclists, property owners, and other drivers are all at risk of your driving. For that reason, societies tightly regulate car ownership and driving. More so than phones: I don’t nee…

So, are you doing the responsible thing and not using a laptop, or any device that's vulnerable, like a router?

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#278

Post by Gaelan »

lorenzhs wrote: post #258
Gaelan wrote: post #171

Earlier quoted context omitted.

Safe Browsing and Crash Reporting can be turned off with no repercussions. You can turn off location altogether, though I'm not sure if you can turn off aGPS only. That leaves app installs (Android allows side loading) and push messaging (I'm not sure about this one) as the ones that you can't disable on iOS.

But please think twice before turning off safe browsing! Contrary to what some seem to believe, it doesn't send your entire browsing history to Google. See https://news.ycombinator.com/item?id=9779990 for an explanation.

Good reminder.

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#279

Post by tinus_hn »

StavrosK wrote: post #276
tinus_hn wrote: post #232

Earlier quoted context omitted.

Apple allows you to 'sideload' apps as long as you get a (free) developer account.

Can I just download an IPA from a website and install it on my phone if I have a developer account?

Can you with jailbreaks?

Re: Under iOS 11, authorities won’t be able to image your device without a passcode

#280

Post by HugoDaniel »

zimpenfish wrote: post #263
HugoDaniel wrote: post #262

Earlier quoted context omitted.

"Apple encrypts End-to-end all iMessage chats, as well as FaceTime (VoIP) calls." End-to-end encryption does not guarantee that Apple keeps your data encrypted, or that they don't process it for 3rd parties (NSA would fit as a 3rd party, where Apple would be for them a content provider, as the slide shows). "You can bet your ass their arm was twisted by the government or they were taken into the program unknowingly (…

> End-to-end encryption does not guarantee that Apple keeps your data encrypted I'm probably misunderstanding something here but doesn't "end-to-end encryption" mean that A encrypts it with B's key and [whoever is in the middle passing it along] can't decrypt it because they don't have B's key?

Yup, so Apple knows about your data.

And according to that slide they are a "provider" for NSA.

End-to-end encryption at least maybe guarantees that it is not your ISP that is selling you out to NSA (making it harder for Apple to explain why they are on that list).

Post reply on HN