Live data from Hacker News

Apple pulls data protection tool after UK government security row

bbc.com

101–110 of 1001 posts

Re: Apple pulls data protection tool after UK government security row

#101

I don't get what's happening to civil liberty in Europe.

[flagged]

Troll much?

Your comment history reeks of differentiated, sensible arguments...

Overall quite ironic as in plain sight to anyone reading the news in the last two years, almost all of Western Europe sees rising right wing and extreme right wing parties.

Re: Apple pulls data protection tool after UK government security row

#103

I don't get what's happening to civil liberty in Europe.

Nothing is happening to it. Governmental overreach, and then if people really want encryption they will vote in privacy-friendly officials. Here in Oregon, USA, we have Ron Wyden, who knows more about netsec than most IT graduates. As long as you can vote there is still civil liberty, just vote for the right people who care about this stuff.

None of what you just said translates to any European country.

None.

Executive power is very representative, not direct, with the sole exception imo being Switzerland?

Re: Apple pulls data protection tool after UK government security row

#104
post #85

I'm confused. I thought iCloud was end-to-end encrypted anyway, and I've never heard of ADP before. Is ADP encryption at rest , whereas normal iCloud storage is only encrypted from the device to the server?

See the "Data categories and encryption" section:

"The table below provides more detail on how iCloud protects your data when using standard data protection or Advanced Data Protection."

https://support.apple.com/en-us/102651

Re: Apple pulls data protection tool after UK government security row

#106
Too right, it was far more problematic than they ever made out.

> The UK government's demand came through a "technical capability notice" under the Investigatory Powers Act (IPA), requiring Apple to create a backdoor that would allow British security officials to access encrypted user data globally. The order would have compromised Apple's Advanced Data Protection feature, which provides end-to-end encryption for iCloud data including Photos, Notes, Messages backups, and device backups.

One scenario would be somebody in an airport and security officials are searching your device under the Counter Terrorism Act (where you don't even have the right to legal advice, or the right to remain silent). You maybe a British person, but you could also be a foreign person moving through the airport. There's no time limit on when you may be searched, so all people who ever travelled through British territory could be searched by officials.

Let that sink in for a moment. We're talking about the largest back door I've ever heard of.

What concerns me more is that Apple is the only company audibly making a stand. I have an Android device beside me that regularly asks me to back my device up to the cloud (and make it difficult to opt out), you think Google didn't already sign up to this? You think Microsoft didn't?

Then think for a moment that most 2FA directly goes via a large tech company or to your mobile. We're just outright handing over the keys to all of our accounts. Your accounts have never been less protected. The battle is being lost for privacy and security.

Re: Apple pulls data protection tool after UK government security row

#107

It's the right choice: don't bow to government pressure, let the people pressure the government.

> let the people pressure the government. Hopefully they will.

I can't imagine many here (UK) will really care, we've had multiple breeches of privacy imposed on us by the powers that be. - Removed incorrect assumption of this not being reported.

Re: Apple pulls data protection tool after UK government security row

#108
post #29

This can set a dangerous precedent. Now why wouldn’t any country demand the same, basically eliminating Advanced Data Protection everywhere, making user data easily accessible to Apple (and therefore governments)?

what do you mean? other countries have demanded the same, e.g. China.

China only requires it for their citizens. The UK asked access to any person's data in the world.

Re: Apple pulls data protection tool after UK government security row

#109
post #107

Earlier quoted context omitted.

> let the people pressure the government. Hopefully they will.

I can't imagine many here (UK) will really care, we've had multiple breeches of privacy imposed on us by the powers that be. - Removed incorrect assumption of this not being reported.

It's literally the number one story on https://www.bbc.co.uk/news/ as I type this comment.

Re: Apple pulls data protection tool after UK government security row

#110
post #90
post #87

Earlier quoted context omitted.

The only difference is Apple doesn't hold the encryption keys when you use ADP. In both cases it's encrypted in transit and at rest.

TIL that Apple holds the keys to my iCloud encrypted data!

For most of it, yes. There are exceptions, e.g., Health and Keychain, for which Apple does not have the keys even without ADP enabled.
Post reply on HN