Live data from Hacker News

iOS 15

apple.com

291–300 of 431 posts

Re: iOS 15

#291
post #201

Earlier quoted context omitted.

the photos are only scanned just before being uploaded to iCloud. If you have CSAM on your phone, just turn off iCloud sync

Great advice and great job repeating the manipulative framing of “if you’re not a pedophile, you have nothing to fear.” Also, if you have anything that may be matched by unknowable and unverifiable matching hashes and algorithms provided by multiple nation states now or ever in the future, including but not limited to political activists, protests, anti-animal-abuse activists, climate activists, and select ethnicitie…

>framing of “if you’re not a pedophile, you have nothing to fear.”

I read it more as "if you don't like it, use another cloud storage solution"

Re: iOS 15

#292
post #272
post #201

Earlier quoted context omitted.

the photos are only scanned just before being uploaded to iCloud. If you have CSAM on your phone, just turn off iCloud sync

If it's so easy to bypass then it sounds like it's a useless feature that won't prevent the proliferation of CSAM

Apple is worried about content uploaded to their iCloud.

As there is no clear legislation, every company is implementing what they feel comfortable with.

Re: iOS 15

#293
post #256

Apple continues to support OS updates on the iPhone 6s, a device released almost 6 years ago. Nor is it reserved for their flagship models - the 2016 iPhone SE also gets the latest and greatest. Meanwhile, my flagship android phone from 2018, the Samsung Galaxy S9, is stuck on the last version of Android. At least it still gets security updates, some manufacturers don't even go that far.

If in October 2013 you bought a just released Google Nexus 5, you would have had official updates until December 2016. At the end of support, you could have then bought the recent Google Pixel (1). And you would have had official updates until December 2019. A little over 6 years out of two devices is as good as it gets on Android, at least it's as good as it got in the mid-late 2010s. If in October 2013 you bought a…

My daughter inherited my 4S from 10 years ago that was sitting in the drawer for 6 years now since I got my 6s (the week it came out, oct 2015). She’s bot yet 12.

The 4S never had a screen or battery change. It’s battery doesn’t last long with YouTube or video calls, but if charged at night and used for emails and voice calls, will last the whole day. It is perfectly usable, can do FaceTime etc.

We will need to replace it soon, though. Her school buddies all use WhatsApp which is no longer supported on iOS 9 (the latest on 4S).

I wouldn’t let her use it much longer for lack of security updates. The hardware - and even battery - are still usable at 10 years. Almost pleasant, even. Best form factor ever.

Re: iOS 15

#294

Earlier quoted context omitted.

How Apple distributes their core apps (Safari, Mail, etc) is orthogonal to how they are implemented, secured, ring levels, sandboxing, etc. These are separate considerations. Apple's core philosophy is that upgrading the system is the fundamental way to get new things. With iOS 15 we've seen the first real fracture in this model (where they are promoting a "stay on iOS 14 for now" option), and maybe eventually they'l…

> How Apple distributes their core apps (Safari, Mail, etc) is orthogonal to how they are implemented, secured, ring levels, sandboxing, etc. These are separate considerations. Strongly disagree. If Apple distributed their apps as normal apps, they'd have normal privileges and when exploits are found the scope would be limited to that app domain. Instead, what we have seen is that Apple's apps act like system service…

I understand that you disagree, however your disagreement seems to be based upon a pretty significant misunderstanding/lack of knowledge both about these apps and their privileges.

Re: iOS 15

#295
post #175

Earlier quoted context omitted.

How do they review the data if your iCloud photos are E2E encrypted?

iCloud photos are not E2E encrypted. Apple has announced no plans whatsoever to make them such. Apple, their sysadmins, and the government can see every photo you have in iCloud. Apple had plans (and, an inside source tells me, an implementation) to do E2E for iCloud Backup, but the FBI asked them not to, so they scrapped it: https://www.reuters.com/article/us-apple-fbi-icloud-exclusiv... This undermines the credibil…

Okay, so basically they are just sort of pinky-swearing that your iCloud photos are encrypted on iCloud, but not in any way that prevents Apple or the government from decrypting them anyway.

This raises the followup question of "why bother scanning the images on-device?", but I can infer two fairly obvious answers. First, the encryption still keeps AWS/Azure/GCP from seeing my photos. Second, and more cynically, they'd have to pay to do computation in the cloud; on-device computation is free to them.

> This undermines the credibility of those who are claiming, without evidence, that this clientside CSAM scanning is a prelude to launching E2E for iCloud data.

I agree; this is consistent with my initial point of confusion. Thanks!

Re: iOS 15

#296
post #275

Earlier quoted context omitted.

>Stay on iOS 14 until Apple surrenders completely on this Or vote with your wallet and abandon the Apple ecosystem. But nobody will because they don't have the bollocks.

More that I need a smart phone for work and life but there are no viable alternatives to iOS and Android, and I trust Apple slightly more than Google not to spy on me and use it against me

Literally this

Re: iOS 15

#297
post #72

Does extensions on iOS safari mean I can finally get ublock origin on it?

Unlikely. Safari supports stateless filtering (ie the blocker app doesn’t get to see your traffic, but just submits rules), and Gorhill has said uBlock cannot work with this restriction[0]. I understand Apple’s wanting to keeping blocking apps from spying and to ensure performance of the blockers, but the lack of uBlock on iOS is a huge pain point for me. [0] https://github.com/el1t/uBlock-Safari/issues/158

The whole point of the parent comment asking is that you can now install proper WebExtensions, so depending on what APIs they allow, this could change.

Re: iOS 15

#298

Earlier quoted context omitted.

Maybe worth noting that, internally, the first-gen iPhone SE is an iPhone 6s; same CPU, GPU, and RAM. It's missing some hardware features, like 2nd gen TouchID, 3D Touch, hardware image stabilization, and some other minor things, but from a performance/capability perspective it's the same phone.

The screen is identical, though, which is awesome— I was rocking an iPhone 5S and was able to buy for dirt cheap someone's cracked-screen SE and swap the screen over. I fully intend for my next device to be an iPhone 8 so that I can eventually pull the same thing with an upgrade to the SE 2.

Interesting. If I'm remembering correctly, the SE actually used a worse display than the 5S -- Anandtech's review found that the display calibration matched that of the 5. So I guess I should look for a cheap 5S screen if I want an easy screen upgrade...

Re: iOS 15

#299
post #24

Earlier quoted context omitted.

Most of these apps (Facetime, iMessage, Safari, Maps, Wallet, Photos) aren't built using their public SDK but rather have deep dependencies on the OS itself.

Which is why when these apps suffer a security vulnerability they've resulted in privilege escalation (inc. root) previously. I actually think it is a bad look for Apple not to dogfood their own public APIs. Microsoft used to do the same thing with Windows and Office, and it was a bad look then too. Credit to Google on this, since many of their apps are just normal apps. No special privileges or bypasses. Even their…

It doesn't make any sense for a company to ship "dog food" publicly to developer partners. In fact, the decision to make an API public is critical to get right and should not be taken lightly.

Making a mistake in private APIs creates some burden within Apple as revisions are made, but this is to be expected from pre-release software.

Making a mistake in public APIs erodes the trust of partners that invested time and money in the platform, and it leads to subpar user experiences.

Re: iOS 15

#300

Earlier quoted context omitted.

This is why I started buying iPhones. The resale value of a device after 2 years of usage is over 50% of the original cost if it's in good condition OEM quality is all over the place for Android, crapware is standard. It's been 4 years of iPhone for me and the only complaint I have is how bad Apple Maps can be

I bought my iPhone 13 Pro, and there was an option right there on the page to trade in my existing hardware. I chose yes, and, because I bought that phone with my same apple account which I also have linked to the hardware, my phone showed up right there as an option. I tapped on it, said yes it's in good condition, and got like $530 CDN off my purchase. Could I sell my phone for more than $530? Yes. Is it worth my t…

Which phone did you trade in to get $530?
Post reply on HN