Live data from Hacker News

Apple dropped plan for encrypting backups after FBI complained

reuters.com

141–150 of 734 posts

Re: Apple dropped plan for encrypting backups after FBI complained

#141
post #57

Apple has a list for that: https://support.apple.com/en-us/HT202303 These are end to end: Home data Health data (requires iOS 12 or later) iCloud Keychain (includes all of your saved accounts and passwords) Payment information QuickType Keyboard learned vocabulary (requires iOS 11 or later) Screen Time Siri information Wi-Fi passwords The messages also end to end but the backup contains the private key. The moral of…

https://www.sync.com provides end-to-end encrypted cloud storage options. Disclaimer I work there.

So does https://spideroak.com/ (I have no affiliation)

Re: Apple dropped plan for encrypting backups after FBI complained

#142

Earlier quoted context omitted.

That’s only for devices where the region is set as China. Why would it be a moot point elsewhere for that reason?

Injustice anywhere is a threat to justice everywhere.

Dont know why down voted. Even if someone doesnt care for individuals in other legal zones (sad), the extra injustice Apple is accepting in other legal zones is a clear display of what they are willing to do to you eventually.

> Injustice anywhere is a threat to justice everywhere.

So I 100% agree.

Re: Apple dropped plan for encrypting backups after FBI complained

#143

Reminds me of WhatsApp claiming it had encryption everywhere and then this [0] dropped. Except, in this case, I'm actually surprised. Didn't Apple publicly claim that it wouldn't bow down to any demands from the agencies? [0]: https://www.theinquirer.net/inquirer/news/3061660/whatsapp-i...

What Apple claims and do are two different things... just like politicians tend to do.

Re: Apple dropped plan for encrypting backups after FBI complained

#144

Beyond HN and tech circles, is there any detectable groundswell of demand for privacy? When you talk with friends & family about privacy, does anyone care? When average people care about privacy, the large players will respond. Until then, pressure from the state can be accommodated without irking customers, so Big Tech will play along.

the youth are either ambivalent or just not the point of understanding, have you seen how much they freely share with each other on messaging, dating, and other apps? Now for the most part today's schools lean pretty heavily towards indoctrination and with so many distractions at hand at their age they don't see issues we see.

As I posted before, then you get into the so called adult realm and many of them will trade away privacy if it gets them money off their coffee, coupons for grocery, or just to brag about their latest get away. it does not matter if its private or government channels, give them a reward and they want it.

Privacy also tends to be highly associated with identity theft not realizing that not only is privacy important for reasons of protecting your stuff but your person and your interest also need protecting both from government and private parties.

Also, some here seem to think they have more to lose than they do. It seems more about wanting to be part of a victim class as long as people and organizations they don't like are punished

tl;dr no, most don't care, give them a cookie and you can get their email and more

Re: Apple dropped plan for encrypting backups after FBI complained

#146

Earlier quoted context omitted.

https://www.sync.com provides end-to-end encrypted cloud storage options. Disclaimer I work there.

So does https://spideroak.com/ (I have no affiliation)

Or maybe rclone with encryption set to on. Then you have a bunch of clouds working for you with crypto which is only yours.

Re: Apple dropped plan for encrypting backups after FBI complained

#147
post #74

Earlier quoted context omitted.

Please see "iCloud security overview", it clearly states which iCloud data is encrypted in transit, on server, and end-to-end: https://support.apple.com/en-us/HT202303

This is from your own link: “For certain sensitive information, Apple uses end-to-end encryption.” “These features and their data are transmitted and stored in iCloud using end-to-end encryption:” * Home data * Health data (requires iOS 12 or later) * iCloud Keychain (includes all of your saved accounts and passwords) * Payment information * QuickType Keyboard learned vocabulary (requires iOS 11 or later) * Screen Ti…

And please mind that e2e means next to nothing when the data is stored and retrieved with a closed source (and usually auto-updating) client app.

Re: Apple dropped plan for encrypting backups after FBI complained

#148

Beyond HN and tech circles, is there any detectable groundswell of demand for privacy? When you talk with friends & family about privacy, does anyone care? When average people care about privacy, the large players will respond. Until then, pressure from the state can be accommodated without irking customers, so Big Tech will play along.

There's this popular conception that the average person doesn't care about privacy, but I think that's wrong. I just think that to really get a handle on what it means to be private in the modern digital age is too complicated for the average person. People are concerned but feel overwhelmed by the technical details and don't know where to start. You need to know the fundamentals of encryption, what a key is, backdoo…

>There's this popular conception that the average person doesn't care about privacy, but I think that's wrong. I just think that to really get a handle on what it means to be private in the modern digital age is too complicated for the average person.

Cypherpunks tried to sound the alarm around the time email got popular and had similar difficulty then - the barrier to adoption was too high and laypersons didn't really understand why they should care enough to overcome that barrier.

See Wired coverage from 1993 as one example of this view from the techno-savvy thinking things should be one way but acknowledging that reality is much different. https://www.wired.com/1993/02/crypto-rebels/

From the article Crypto Anarchy, he believes, is inevitable, despite the forces marshaled against it. "I don't see any chance that it will be done politically," says the Cypherpunk. "[But] it will be done technologically. It's already happening."

Rather than some digital utopia where personal information is heavily protected and not linked, we have a generation of programmers working to persist tracking cookies across browsing sessions, whether anonymous or not and law enforcement leveraging a scraped database of three billion photos to identify people whether they choose to be identified or not.

By following the electronic links we make, one can piece together a depressingly detailed profile of who we are: Our health records, phone bills, credit histories, arrest records, and electronic mail all connect our actions and expressions to our physical selves. Crypto presents the possibility of severing these links. It is possible to use cryptography to actually limit the degree to which one can track the trail of a transaction.

Of course that didn't happen beyond https everywhere for point-to-point encryption and regular leaks of consumer data proves once collected data is often not protected from public scrutiny, much less encrypted at rest, anonymized, etc. So even if you do protect your data perfectly there's still a chance it'll be discovered elsewhere. Rather than trying to create backdoors, government should be trying to enforce much more stringent regulations on use and protection of consumer data. However given the political zeitgeist I don't really see that happening.

Re: Apple dropped plan for encrypting backups after FBI complained

#149
post #39
post #26

Earlier quoted context omitted.

Why would you think it was end-to-end encrypted? Did you never use icloud.com where you can simply access all your icloud data with a usernam+password?

Well, you just have to “trust” the server to not serve a website that will phone home your password. Apple pinky swears they won’t do that, and all your browser extensions running all the time do, too. As Mark Zuckerberg once opined: “They ‘trust’ me. Those dumbfucks.” https://www.businessinsider.com/embarrassing-and-damaging-zu... And it’s not just mere words, here is he actually set up a honeypot site to get people…

None of what you said has anything to do with E2E encryption.

Re: Apple dropped plan for encrypting backups after FBI complained

#150

Earlier quoted context omitted.

While Apple doesn't force its users to use iCloud, they also don't provide an alternative way to do full backups of iOS/iPadOS devices over a network. Yes, you can plug an iPhone into a Mac, but that doesn't scale.

You can set local auto backup over wifi in itunes right?

Here's a source indicating that from 2018:

https://www.switchingtomac.com/tutorials/ios-tutorials/backu...

Post reply on HN