Live data from Hacker News

U.K. orders Apple to let it spy on users’ encrypted accounts

washingtonpost.com

221–230 of 1001 posts

Re: U.K. orders Apple to let it spy on users’ encrypted accounts

#222
post #71

I doubt very much if any terrorist, criminal or child abuser is going to use any google or apple cloud service to back up their files. Anyone with a fundamental understanding of online privacy and security would encrypt any files prior to uploading them to the cloud rendering any back doors and access to those files useless and toothless. I dont use any of these services. I have never understood the thinking around u…

> I doubt very much if any terrorist, criminal or child abuser is going to use any google or apple cloud service to back up their files. Most of the time, people become terrorists, criminals or child abusers because they're stupid, not because they're smart.

[flagged]

Re: U.K. orders Apple to let it spy on users’ encrypted accounts

#223

Earlier quoted context omitted.

But if they could give a key to the government agency, it wouldn't be end-to-end encrypted, right? Or are you thinking they would have a copy of users' keys that they gave out? (Which I guess is technically possible.)

It would be no different from how multiple devices and users access the same content (chat, shared data, etc.). The government’s keys would always be included in set which encrypts the real key. They don’t need the users’ key, Apple doesn’t need their private keys. So technically still end to end encrypted, just with a hidden party involved. Users have no way of knowing this doesn’t already happen. And when their key…

[deleted]

Re: U.K. orders Apple to let it spy on users’ encrypted accounts

#224
post #115
post #89

> When asked by The Post whether any government had requested a backdoor, Google spokesman Ed Fernandez did not provide a direct answer but suggested none exist: "Google cannot access Android end-to-end encrypted backup data, even with a legal order," he stated. No, that does not suggest none exists, it only says they don’t have access to it. They could have chosen or have been ordered to give the keys to the governm…

Before people immediately think the worst of Google or other corporate representatives, be aware that people working in these companies need to weight their words carefully. From The Verge's article on the issue: The UK has reportedly served Apple a document called a technical capability notice. It’s a criminal offense to even reveal that the government has made a demand. Similarly, if Apple did cede to the UK’s dema…

How does this work wrt false advertising laws? If I relied upon their end to end encryption and it turns out to be false advertising because there's a secret backdoor, who do I sue?

Re: U.K. orders Apple to let it spy on users’ encrypted accounts

#225
post #59

Earlier quoted context omitted.

> Never again can our entire country be locked down on shoddy evidence and lies What’s this about? Is it some mad “covid was a hoax” thing?

Reform UK don't believe Covid was a hoax. Reform UK believe that the purported efficacy of the mRNA vaccines at preventing transmission was massively exaggerated (we now know it was). https://www.thelancet.com/journals/laninf/article/PIIS1473-3... Reform UK believe that the detrimental side effects of lockdown policy outweighed the benefits of lockdown policy (again, there's evidence to support this view) https://sit…

> Reform UK believe that the purported efficacy of the mRNA vaccines at preventing transmission was massively exaggerated (we now know it was).

Okay, let's check the paper.

> Thus, the current evidence suggests that current mandatory vaccination policies might need to be reconsidered, and that vaccination status should not replace mitigation practices such as mask wearing, physical distancing, and contact-tracing investigations, even within highly vaccinated populations.

I must conclude, as a party dedicated to the science, that Reform UK therefore would be on board with the above mitigations, if they are genuinely interested in pursuing at least the simplest / cheapest effective mitigations for Covid.

Was that the case?

Re: U.K. orders Apple to let it spy on users’ encrypted accounts

#226

Earlier quoted context omitted.

Well, in the UK just planning a non-violent protest can get you 5 years in prison as many people have already discovered. Protesting has been pretty much made illegal by a very broad legislation that defines any protest that causes "disruption" as illegal - what "disruption" means is up to interpretation of course.

Which just means you need a large group to protest. They can arrest 10,000 people no problem, but get several million together and you have an army. Best is to get some of the actually army/police with you so that when (not if!) they try to get violent you can make it clear this is a revolution they won't win. I hope it never reaches the above level, but always remember that remains an option.

Yeah but to get a million people together you need to plan for it first, and that's where they get you :P It's honestly shocking the state of things in the UK in that regard. I'm surprised there isn't more outrage around it, even the people I know who used to say they hate the Just Stop Oil protesters expressed shock that they've been given 5 years for just talking about a protest, not actually doing it.

Re: U.K. orders Apple to let it spy on users’ encrypted accounts

#227

Earlier quoted context omitted.

> prevent the UK authorities from interfering with their activities I'm still missing how this could be enforced ? To my layman understanding, this reads the same as if China said : "Meta, Tesla, Valve etc has entities in China therefore we get to see all data they store in the EU and the US. The UK has Zero jurisdiction in Ireland for example where a lot of EU data may be stored.

> I'm still missing how this could be enforced ? By banning Apple from doing business in the UK. The US used a similar strategy decades ago to break Swiss Bank Secrecy laws (either Swiss banks had to give up the info or they were going to be kicked out of the US).

They ban Apple from doing business and watch as the uk stock market goes into the toilet as companies scramble to get out.

Re: U.K. orders Apple to let it spy on users’ encrypted accounts

#228
post #90
post #79

> requires that Apple creates a back door that allows UK security officials unencumbered access to encrypted user data worldwide How could this even be enforced if Apple pulls out cloud services of the UK ? It's such a ridiculous request, the British Intelligence agencies must be bored coming up with new ways to make Apple look good.

Apple still has legal entities in the UK. Pulling out cloud services would be insufficient to prevent the UK authorities from interfering with their activities.

More importantly, apple has customers in the UK. The business from captured apple users is more valuable than apple's privacy reputation.

This all seems very similar to RIM and the aftermath of the riots in the UK. The backdoors became too obvious for customers to ignore. Did not go well for RIM in the market afterwards.

Re: U.K. orders Apple to let it spy on users’ encrypted accounts

#229
post #115
post #89

> When asked by The Post whether any government had requested a backdoor, Google spokesman Ed Fernandez did not provide a direct answer but suggested none exist: "Google cannot access Android end-to-end encrypted backup data, even with a legal order," he stated. No, that does not suggest none exists, it only says they don’t have access to it. They could have chosen or have been ordered to give the keys to the governm…

Before people immediately think the worst of Google or other corporate representatives, be aware that people working in these companies need to weight their words carefully. From The Verge's article on the issue: The UK has reportedly served Apple a document called a technical capability notice. It’s a criminal offense to even reveal that the government has made a demand. Similarly, if Apple did cede to the UK’s dema…

Which is exactly why I’m making this point. If no government had requested a backdoor, they could’ve simply answered “no”. When you have to weight your words, it means you’re not at liberty to say whatever you want. That is itself a signal, and why warrant canaries are a thing.

https://en.wikipedia.org/wiki/Warrant_canary

Post reply on HN