101–110 of 228 posts
Earlier quoted context omitted.
You can build one. Lots of guides out there and compatibility lists for components. It’s going to be a science project though with only community support for an adversarial operating system. If you plan to use it for work then buy a Mac. It’s a tool for a job.
running it virtually is also an option. I run macos in virtualbox for the times I need it (for me that's not daily) and have no issues with it
Earlier quoted context omitted.
You can reset your password with email and phone number. Did it once.
Right, because there isn't the end-to-end encryption scheme that we're currently discussing. You seem to have missed the point of the conversation: Comment 1: The problem with adding end-to-end encryption is that password reset is no longer possible (or it's possible but your data is lost) Comment 2: You can come up with an end-to-end encryption scheme where you can reset your password and keep your data so long as y…
Some have speculated that with the introduction of the PSI/CSAM system Apple will enable E2EE backups. Given the lack of an explicit statement on Apple's part and their history regarding E2EE backups (this article, and other statements). It seems really unlikely to me that Apple will enable E2EE backups. Under E2EE, assuming the device key is randomly generated, if you have one device (as many users do) and you lose…
I played a bit with crypto in a web browser using Rust and WebAssembly, and it works perfectly fine.
Earlier quoted context omitted.
The FBI can request until they’re blue in the face. They don’t make laws. And so far, there aren’t any laws preventing Apple from encrypting backups.
Right.. yeah because some laws like anti terrorism or money laundering etc stated that tech companies has to save the data and share with the gov if the gov requested. Source: I work in fintech
So that has nothing to do with the mechanism of securing data and everything to do with the finance organization compliance with the laws.
"Fintech" is a fancy word for a company doing financial applications, not a copout on financial regulations by using the "tech" word as an excuse.
There are a bunch of standards requiring encryption at rest and encryption in transit of PII and other data in finance. That does not mean that authorized users do not have access to it.
Some have speculated that with the introduction of the PSI/CSAM system Apple will enable E2EE backups. Given the lack of an explicit statement on Apple's part and their history regarding E2EE backups (this article, and other statements). It seems really unlikely to me that Apple will enable E2EE backups. Under E2EE, assuming the device key is randomly generated, if you have one device (as many users do) and you lose…
> It seems really unlikely to me that Apple will enable E2EE backups. And even if they did, how would we verify that the code they instruct our hardware to run does e2ee correctly, without bugs or backdoors? Apple doesn't seem to be in the habit of opening much of their code or (on mobile) allowing users to install unapproved builds. Unless that changed, I would be skeptical, just as I am of all "e2ee" software that…
I spent 2 months going through the signal code base checking it and now I need to audit the production code on their servers as well as the binaries they have compiled. Any tips?
Earlier quoted context omitted.
No not that, what I meant was that you have to be able to provide when requested. Meaning that you have to be able to decrypt it if requested. Not just 1 way encryption
So is Amazon breaking the law if I upload GPG-encrypted files to S3?
Earlier quoted context omitted.
China. Specifically, gradual capitulation to China. "Apple's earnings for Greater China in Q2 2021 were up 87.5% from this time last year, to $17.7 billion. During its latest earnings call, Apple has announced dramatically increased revenues from Greater China for the three months ending March, 2021." China has cracked down hard on domestic Internet companies over the past few weeks (deliberately crushing their tech…
So you think if Apple announced a new algorithm that would be used for mass surveillance of the Chinese, there'd be some kind of mass outrage. And to avoid that mass outrage, they're starting with mass surveillance against Americans instead. None of that makes sense. Why would using the system only to target child abuse in the US make people change their mind about using it against political dissidents?
If you go for a thing directly you show your hand and get a lot of backlash.
Case in point: the British NHS (because we can see it happening in real time).
Add the capability to do something for a good reason (NHS spending should be more efficient; we need approved suppliers // do it for the children) in order to make the further move of what you really want without much resistance (privatise parts of the NHS; eventually much of the NHS // back door every terrorist, dissident, detractor)
There's a way to make fully encrypted backups of your iPhone locally, check out my blog post from my self-hosting series: https://www.naut.ca/blog/2020/03/20/self-hosting-series-part... This works well on Linux, and iOS 14. You can skip to the section `Compiling idevicebackup2`.
Is there any icloud alternative backup, that doesn't involve connecting to a computer? It seems that it's possible for third party apps to backup certain data, like photos and contacts, but to do a full device backup you either need to use icloud, or connect via USB to a computer.
In the first half of 2020, Apple gave data on over 31,000 users/accounts based on FISA requests National Security Letter requests[1]. Apple provided data to the government's requests roughly 9,000 times. About 85% - 92% of the time, according to Apple, they responded to data requests from the government with the data that was requested. I don't see why Apple would turn about face and make it impossible to respond to…
What data are they responding with? Account name and creation date? IP addresses used to log in to the account? iCloud backups?
Court orders are part of basic auditing of a service. Seeing what they have to hand over on request (they will hand over everything) tells you exactly what information they have.
Don't use the cloud if you care about privacy, or encrypt the data yourself before uploading. Has always been the case.
I fully agree but Apple is pushing iCloud hard. Hell it's seemless ecosystem is their main selling point.