Earlier quoted context omitted.
That link says: Backup Encryption In Transit: Yes Backup Encryption On Server: Yes
So it seems like the data are encrypted both in transit and on the server and it means that nobody is able to get unencrypted data even if they can intercept the traffic or access the server.
Apple dropped plan for encrypting backups after FBI complained
611–620 of 734 posts
Re: Apple dropped plan for encrypting backups after FBI complained
#612Earlier quoted context omitted.
The key is included in the iCloud backup stored by Guizhou on the “Cloud Big Data Industrial Development Co., Ltd.“ https://support.apple.com/en-us/HT208351
If you use iCloud backups then your iMessage key is stored unencrypted regardless of which country you're in. That's a main point of this article.
> Chinese users of Apple’s iCloud service will see their data–along with that data’s cryptographic keys–stored inside the country beginning Wednesday, Reuters reports. The move will mean that Chinese authorities will have easier access to Chinese users’ iCloud data than before when that data was stored in the U.S. The move is a contentious one, as human rights activists say Chinese authorities will now have an easier means of obtaining dissidents data since it no longer needs to go through the U.S. legal system to get Apple to hand over its cryptographic keys for Chinese users.
https://www.fastcompany.com/40535933/apple-will-store-icloud...
Re: Apple dropped plan for encrypting backups after FBI complained
#613Earlier quoted context omitted.
You can back them up locally.
But you can't do so automatically. You have to open iTunes (or Finder) and explicitly click a button. If Apple is privacy-oriented, they should've allowed this long time ago. Unlike iCloud backups, this is certainly not a legal issue, as the "local" backups stored on one's computer are already fully encrypted.
* My memory says I spent way too much on an iPhone. My ego says that can't be true, and in the end memory yields. -nietzsche
Re: Apple dropped plan for encrypting backups after FBI complained
#614Earlier quoted context omitted.
> Wonder if this will help to kill a meme, aboyt how much Apple cares about users and what great values they have, how they're going to stand for the user, fight with governments, etc. In this instance, Apple decided to continue to not encrypt iCloud backups because, according to one source, > […] the company did not want to risk being attacked by public officials for protecting criminals, sued for moving previously…
> Apple has a balance to strike between the issues of encryption, privacy, and law enforcement [...] No, they do not. If Apple wants a reputation for privacy and respecting its customers, then it has to put them first. Don't apologize for them making this user-hostile choice. We could be merely a generation away from the hell hole that is social credit. We can't afford to keep ceding ground on privacy. We have to eng…
I hope you have a similar principled stand on other pressing issues such as global poverty and health or factory farming. If we all focus on principles rather than just the convenient thing to do, the world would be a much better place for everyone :)
Re: Apple dropped plan for encrypting backups after FBI complained
#615Wonder if this will help to kill a meme, about how much Apple cares about users and what great values they have, how they're going to stand for the user, fight with governments, etc. While iPhone itself is pretty secure as a device phone (and Apple makes sure to remind you about that in each ad, public speaking, attacks on competitors, etc), as an ecosystem it's not secure. And it's like that on purpose - there's no…
As someone who has bought into that meme I will admit this feels like a pretty huge betrayal by Apple. So, yes, I think if Apple sticks with this, their whole privacy stance is going in the toilet now. And a very dirty toilet it is. Beyond just the facts of not protecting data, there is also the deception. This is some really very, very, nasty stuff for Apple's brand and the reputation of every person who works at Ap…
I’m turning off iCloud backup — the only reason I have it on actually is to turn off the annoying backup nags. My photos are in iCloud, and so are my messages - I actually can’t think of anything valuable outside of those that I’d actually need iCloud backup for ...
It doesn’t seem worth the risk
Re: Apple dropped plan for encrypting backups after FBI complained
#616Earlier quoted context omitted.
This has changed - now you can change the password for new backups with the iPhone passcode.
Since when? I didn't see any such option in iTunes when I was trying last week (maybe it's because I'm using Windows?)
Re: Apple dropped plan for encrypting backups after FBI complained
#617Wonder if this will help to kill a meme, about how much Apple cares about users and what great values they have, how they're going to stand for the user, fight with governments, etc. While iPhone itself is pretty secure as a device phone (and Apple makes sure to remind you about that in each ad, public speaking, attacks on competitors, etc), as an ecosystem it's not secure. And it's like that on purpose - there's no…
Re: Apple dropped plan for encrypting backups after FBI complained
#618Earlier quoted context omitted.
iPhone/iPad backups stored locally on iTunes (or Finder, in Catalina) are end-to-end encrypted. iCloud backups always were encrypted based on a key derived from your iCloud account credentials, since the beginning...
For local backup, iMazing is great. It also does other useful things. It costs money though and you can decide whether that's a feature or bug. https://imazing.com/
First party backups from Apple (iCloud/iTunes) restore a perfect replica of the phone, including app icon locations, arrangement, notifications, offloaded storage etc. I'm honestly skeptical that anyone else would be able to pull that off.
Re: Apple dropped plan for encrypting backups after FBI complained
#619Wonder if this will help to kill a meme, about how much Apple cares about users and what great values they have, how they're going to stand for the user, fight with governments, etc. While iPhone itself is pretty secure as a device phone (and Apple makes sure to remind you about that in each ad, public speaking, attacks on competitors, etc), as an ecosystem it's not secure. And it's like that on purpose - there's no…
As someone who has bought into that meme I will admit this feels like a pretty huge betrayal by Apple. So, yes, I think if Apple sticks with this, their whole privacy stance is going in the toilet now. And a very dirty toilet it is. Beyond just the facts of not protecting data, there is also the deception. This is some really very, very, nasty stuff for Apple's brand and the reputation of every person who works at Ap…
Re: Apple dropped plan for encrypting backups after FBI complained
#620Earlier quoted context omitted.
> Apple has a balance to strike between the issues of encryption, privacy, and law enforcement [...] No, they do not. If Apple wants a reputation for privacy and respecting its customers, then it has to put them first. Don't apologize for them making this user-hostile choice. We could be merely a generation away from the hell hole that is social credit. We can't afford to keep ceding ground on privacy. We have to eng…
Well said! I hope you have a similar principled stand on other pressing issues such as global poverty and health or factory farming. If we all focus on principles rather than just the convenient thing to do, the world would be a much better place for everyone :)
https://en.wikipedia.org/wiki/Straw_man
Meanwhile, Apple says:
> Privacy is a fundamental human right. At Apple, it’s also one of our core values. Your devices are important to so many parts of your life. What you share from those experiences, and who you share it with, should be up to you. We design Apple products to protect your privacy and give you control over your information. It’s not always easy. But that’s the kind of innovation we believe in.
https://www.apple.com/privacy/
When Apple markets themselves this way, people expect their actions to be in line with their words. Making iCloud device backups vulnerable to law enforcement demands is not in line with Apple's privacy-oriented marketing, and suggests that Apple's vocal defense of encryption is just a public relations strategy.