Live data from Hacker News

Apple dropped plan for encrypting backups after FBI complained

reuters.com

611–620 of 734 posts

Re: Apple dropped plan for encrypting backups after FBI complained

#611
post #519

Earlier quoted context omitted.

That link says: Backup Encryption In Transit: Yes Backup Encryption On Server: Yes

So it seems like the data are encrypted both in transit and on the server and it means that nobody is able to get unencrypted data even if they can intercept the traffic or access the server.

No, the data is still not end-to-end encrypted, which means that Apple can decrypt the data on the server.

Re: Apple dropped plan for encrypting backups after FBI complained

#612
post #351

Earlier quoted context omitted.

The key is included in the iCloud backup stored by Guizhou on the “Cloud Big Data Industrial Development Co., Ltd.“ https://support.apple.com/en-us/HT208351

If you use iCloud backups then your iMessage key is stored unencrypted regardless of which country you're in. That's a main point of this article.

Apple's decision to store the keys on Chinese servers was criticized because it effectively reduced security for Chinese iCloud users:

> Chinese users of Apple’s iCloud service will see their data–along with that data’s cryptographic keys–stored inside the country beginning Wednesday, Reuters reports. The move will mean that Chinese authorities will have easier access to Chinese users’ iCloud data than before when that data was stored in the U.S. The move is a contentious one, as human rights activists say Chinese authorities will now have an easier means of obtaining dissidents data since it no longer needs to go through the U.S. legal system to get Apple to hand over its cryptographic keys for Chinese users.

https://www.fastcompany.com/40535933/apple-will-store-icloud...

Re: Apple dropped plan for encrypting backups after FBI complained

#613
post #583

Earlier quoted context omitted.

You can back them up locally.

But you can't do so automatically. You have to open iTunes (or Finder) and explicitly click a button. If Apple is privacy-oriented, they should've allowed this long time ago. Unlike iCloud backups, this is certainly not a legal issue, as the "local" backups stored on one's computer are already fully encrypted.

True or not, you have my apathy and my down vote.*

* My memory says I spent way too much on an iPhone. My ego says that can't be true, and in the end memory yields. -nietzsche

Re: Apple dropped plan for encrypting backups after FBI complained

#614

Earlier quoted context omitted.

> Wonder if this will help to kill a meme, aboyt how much Apple cares about users and what great values they have, how they're going to stand for the user, fight with governments, etc. In this instance, Apple decided to continue to not encrypt iCloud backups because, according to one source, > […] the company did not want to risk being attacked by public officials for protecting criminals, sued for moving previously…

> Apple has a balance to strike between the issues of encryption, privacy, and law enforcement [...] No, they do not. If Apple wants a reputation for privacy and respecting its customers, then it has to put them first. Don't apologize for them making this user-hostile choice. We could be merely a generation away from the hell hole that is social credit. We can't afford to keep ceding ground on privacy. We have to eng…

Well said!

I hope you have a similar principled stand on other pressing issues such as global poverty and health or factory farming. If we all focus on principles rather than just the convenient thing to do, the world would be a much better place for everyone :)

Re: Apple dropped plan for encrypting backups after FBI complained

#615
post #230

Wonder if this will help to kill a meme, about how much Apple cares about users and what great values they have, how they're going to stand for the user, fight with governments, etc. While iPhone itself is pretty secure as a device phone (and Apple makes sure to remind you about that in each ad, public speaking, attacks on competitors, etc), as an ecosystem it's not secure. And it's like that on purpose - there's no…

As someone who has bought into that meme I will admit this feels like a pretty huge betrayal by Apple. So, yes, I think if Apple sticks with this, their whole privacy stance is going in the toilet now. And a very dirty toilet it is. Beyond just the facts of not protecting data, there is also the deception. This is some really very, very, nasty stuff for Apple's brand and the reputation of every person who works at Ap…

Honestly I didn’t realize icloud backups were encrypted by a key Apple controls. I assumed they leveraged the same key sharing tech as iMessage ...

I’m turning off iCloud backup — the only reason I have it on actually is to turn off the annoying backup nags. My photos are in iCloud, and so are my messages - I actually can’t think of anything valuable outside of those that I’d actually need iCloud backup for ...

It doesn’t seem worth the risk

Re: Apple dropped plan for encrypting backups after FBI complained

#616
post #360

Earlier quoted context omitted.

This has changed - now you can change the password for new backups with the iPhone passcode.

Since when? I didn't see any such option in iTunes when I was trying last week (maybe it's because I'm using Windows?)

It's iPhone side; actually it's part of a settings reset: https://support.apple.com/en-us/HT205220#help

Re: Apple dropped plan for encrypting backups after FBI complained

#617

Wonder if this will help to kill a meme, about how much Apple cares about users and what great values they have, how they're going to stand for the user, fight with governments, etc. While iPhone itself is pretty secure as a device phone (and Apple makes sure to remind you about that in each ad, public speaking, attacks on competitors, etc), as an ecosystem it's not secure. And it's like that on purpose - there's no…

China allows them to sell Apple devices in China that alone makes me doubt the privacy of apple devices.

Re: Apple dropped plan for encrypting backups after FBI complained

#618
post #41

Earlier quoted context omitted.

iPhone/iPad backups stored locally on iTunes (or Finder, in Catalina) are end-to-end encrypted. iCloud backups always were encrypted based on a key derived from your iCloud account credentials, since the beginning...

For local backup, iMazing is great. It also does other useful things. It costs money though and you can decide whether that's a feature or bug. https://imazing.com/

Does imazing restore a phone as it is?

First party backups from Apple (iCloud/iTunes) restore a perfect replica of the phone, including app icon locations, arrangement, notifications, offloaded storage etc. I'm honestly skeptical that anyone else would be able to pull that off.

Re: Apple dropped plan for encrypting backups after FBI complained

#619
post #230

Wonder if this will help to kill a meme, about how much Apple cares about users and what great values they have, how they're going to stand for the user, fight with governments, etc. While iPhone itself is pretty secure as a device phone (and Apple makes sure to remind you about that in each ad, public speaking, attacks on competitors, etc), as an ecosystem it's not secure. And it's like that on purpose - there's no…

As someone who has bought into that meme I will admit this feels like a pretty huge betrayal by Apple. So, yes, I think if Apple sticks with this, their whole privacy stance is going in the toilet now. And a very dirty toilet it is. Beyond just the facts of not protecting data, there is also the deception. This is some really very, very, nasty stuff for Apple's brand and the reputation of every person who works at Ap…

[deleted]

Re: Apple dropped plan for encrypting backups after FBI complained

#620

Earlier quoted context omitted.

> Apple has a balance to strike between the issues of encryption, privacy, and law enforcement [...] No, they do not. If Apple wants a reputation for privacy and respecting its customers, then it has to put them first. Don't apologize for them making this user-hostile choice. We could be merely a generation away from the hell hole that is social credit. We can't afford to keep ceding ground on privacy. We have to eng…

Well said! I hope you have a similar principled stand on other pressing issues such as global poverty and health or factory farming. If we all focus on principles rather than just the convenient thing to do, the world would be a much better place for everyone :)

echelon did not claim to be someone who takes a principled stand on global poverty, health, or factory farming.

https://en.wikipedia.org/wiki/Straw_man

Meanwhile, Apple says:

> Privacy is a fundamental human right. At Apple, it’s also one of our core values. Your devices are important to so many parts of your life. What you share from those experiences, and who you share it with, should be up to you. We design Apple products to protect your privacy and give you control over your information. It’s not always easy. But that’s the kind of innovation we believe in.

https://www.apple.com/privacy/

When Apple markets themselves this way, people expect their actions to be in line with their words. Making iCloud device backups vulnerable to law enforcement demands is not in line with Apple's privacy-oriented marketing, and suggests that Apple's vocal defense of encryption is just a public relations strategy.

Post reply on HN