11–20 of 130 posts
This may be annoying, but it’s uploading encrypted versions of passwords, not passwords themselves. Keychain is end-to-end encrypted so no one else can read them.
Earlier quoted context omitted.
They say they can’t, but it’s impossible to be certain. Although, if you distrust Apple enough to think they might lie about it, you probably wouldn’t want to use any Apple device or services. They already have privileged access to the software and hardware.
> Although, if you distrust Apple enough to think they might lie about it, you probably wouldn’t want to use any Apple device or services. It's not even about lies. It's about bugs and vulnerabilities, which every vendor has.
This may be annoying, but it’s uploading encrypted versions of passwords, not passwords themselves. Keychain is end-to-end encrypted so no one else can read them.
And guess who has the decryption keys…?
Earlier quoted context omitted.
They say they can’t, but it’s impossible to be certain. Although, if you distrust Apple enough to think they might lie about it, you probably wouldn’t want to use any Apple device or services. They already have privileged access to the software and hardware.
> They already have privileged access to the software and hardware. The fact that the phone manufacturer has a more privileged access than the owner of the phone is absolute insanity.
Earlier quoted context omitted.
> They already have privileged access to the software and hardware. The fact that the phone manufacturer has a more privileged access than the owner of the phone is absolute insanity.
That's pretty normal, isn't it? Do you have more privileged access to your phone than its kernel does?
Earlier quoted context omitted.
That's pretty normal, isn't it? Do you have more privileged access to your phone than its kernel does?
I'd prefer it to work like a normal computer where there's a separation of the OS and the hardware. But sure, other phones aren't better.
This may be annoying, but it’s uploading encrypted versions of passwords, not passwords themselves. Keychain is end-to-end encrypted so no one else can read them.
End-to-end encrypted but Apple issues the keys when you log in and I don't think they offer any way to require explicit verification of new devices.
Still no proof that there’s no back door, but as far as the system on the surface goes, it does make sense.
Earlier quoted context omitted.
> Although, if you distrust Apple enough to think they might lie about it, you probably wouldn’t want to use any Apple device or services. It's not even about lies. It's about bugs and vulnerabilities, which every vendor has.
I'm considered switching to Mac from linux and I came across your blog which has been very informative. What made you chose mac over linux?
Earlier quoted context omitted.
End-to-end encrypted but Apple issues the keys when you log in and I don't think they offer any way to require explicit verification of new devices.
When importing the passwords into a new devices you’re required to enter the device password of whatever device created the password initially. Still no proof that there’s no back door, but as far as the system on the surface goes, it does make sense.