Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple – Privacy – Government Information Requests

apple.com

Post reply on HN
Print view View original

161–170 of 217 posts

Re: Apple – Privacy – Government Information Requests

#161

Post by ceejayoz »

declan wrote: post #12
zaroth wrote: post #9

Earlier quoted context omitted.

You don't have to guess -- they specify exactly what is encrypted in iCloud; "On devices running iOS 8, your personal data such as photos, messages (including attachments), email, contacts, call history, iTunes content, notes, and reminders is placed under the protection of your passcode."

But "iCloud does not encrypt data stored on IMAP mail servers" or Notes http://support.apple.com/kb/HT4865

> iCloud does not encrypt data stored on IMAP mail servers

Well, no shit. If they did that I'd log into my Gmail web interface and see encrypted gobbledygook instead of my emails.

Re: Apple – Privacy – Government Information Requests

#162

Post by bcohen5055 »

kristofferR wrote: post #99
downandout wrote: post #93

"On devices running iOS 8, your personal data such as photos, messages (including attachments), email, contacts, call history, iTunes content, notes, and reminders is placed under the protection of your passcode. Unlike our competitors, Apple cannot bypass your passcode and therefore cannot access this data" This is key. The way we engineer software and services can have a major impact on the war against overly invas…

The quote is extremely misleading. Sure, it's encrypted by your passcode, and that's great. It's important to note however that the passcode is just 4 digits long by default, and could be bruteforced by Apple in milliseconds if they wanted to. So to say that "Apple cannot bypass your passcode" is misleading, as guessing it is absurdly easy. http://www.slideshare.net/alexeytroshichev/icloud-keychain-3...

There is a "self destruct" option to wipe the iPhone after 10 failed pass code attempts. It's not bulletproof against a bruit-force but it's something

Re: Apple – Privacy – Government Information Requests

#163

Post by jedberg »

pikachu_is_cool wrote: post #111
BillinghamJ wrote: post #107

Earlier quoted context omitted.

You're not limited to 4 digits. In fact, when you set up Touch ID, the phone prompts you to enter a longer text-based passcode on the basis that you shouldn't have to enter it often.

The government has your fingerprint.

If you grew up in the US, they already have it. Every elementary school kid in the US gets fingerprinted.

EDIT: It appears I was wrong, this was only in LA county.

Re: Apple – Privacy – Government Information Requests

#164

Post by Shivetya »

imaginenore wrote: post #100
downandout wrote: post #95

Earlier quoted context omitted.

Not if they designed it properly. That's like saying that all makers of encryption software can, if they really want to, access all data encrypted with their software.

Of course they can. All you have to do is leak passwords/private keys. An OS is actually much more powerful, it controls everything, it has direct access to memory. If a user can see his photo, the OS can.

not quite, on the platform I am on you cannot extract passwords at all, they simply are not stored. encryption at the hardware level may have a backdoor but os level is similar.

lets be honest, if they want your data your the weakest link. if you want to be paranoid enough to go the route your thinking its far cheaper for them to take you to a back room and employ a hammer to you.

Re: Apple – Privacy – Government Information Requests

#165

Post by krisgenre »

rsynnott wrote: post #130
krisgenre wrote: post #120

Earlier quoted context omitted.

Aren't all these data backed up to iCloud? Is it also protected with a passcode?

This seems like the flaw in the argument, yeah. iCloud isn't mandatory, of course, but most people do use it, so peoples' photos and things will be in The Cloud, anyway. Possibly several The Clouds; Google+ on iOS keeps badgering me to enable automatic photo uploading.

Hmmm.. Isn't it way easier for the feds to peek into the cloud for my data without even me knowing so that I'll keep giving them the data then to confiscate my phone and investigate it?

To me, it seems like this passcode thing is a good way to keep my data safe from thieves but from the govt.? don't think so.

Re: Apple – Privacy – Government Information Requests

#166

Post by sixothree »

ceejayoz wrote: post #161
declan wrote: post #12

Earlier quoted context omitted.

But "iCloud does not encrypt data stored on IMAP mail servers" or Notes http://support.apple.com/kb/HT4865

> iCloud does not encrypt data stored on IMAP mail servers Well, no shit. If they did that I'd log into my Gmail web interface and see encrypted gobbledygook instead of my emails.

Like how when you use a password to open an encrypted zip file it's all gobbledygook inside?

Re: Apple – Privacy – Government Information Requests

#167

Post by rsynnott »

krisgenre wrote: post #165
rsynnott wrote: post #130

Earlier quoted context omitted.

This seems like the flaw in the argument, yeah. iCloud isn't mandatory, of course, but most people do use it, so peoples' photos and things will be in The Cloud, anyway. Possibly several The Clouds; Google+ on iOS keeps badgering me to enable automatic photo uploading.

Hmmm.. Isn't it way easier for the feds to peek into the cloud for my data without even me knowing so that I'll keep giving them the data then to confiscate my phone and investigate it? To me, it seems like this passcode thing is a good way to keep my data safe from thieves but from the govt.? don't think so.

Yes; if this is something you're worried about, you probably shouldn't use cloud services. It's not like they're mandatory.

Re: Apple – Privacy – Government Information Requests

#169

Post by josephlord »

zobzu wrote: post #29

"Unlike our competitors, Apple cannot bypass your passcode and therefore cannot access this data" Oh really? Privacy is marketing now.

That this has become an area companies are competing in is a good thing. The fact that it was necessary is sad but I don't blame the companies for that. When it is the area for competition it will naturally be the focus for marketing - providing that the marketing matches the reality and isn't misleading that is also a good thing so people can know where the privacy is and choose it.

Re: Apple – Privacy – Government Information Requests

#170

Post by krisgenre »

adventured wrote: post #104

I understand this does nothing to stop the NSA from snooping on me. However, the local / state police are a much more imminent threat to your average person with the rise of the police state than the NSA and FBI are. The local police are becoming ever more aggressive when it comes to your privacy and devices like your phone. If this turns out to be as good of a move as it seems like it is, Apple has acquired my atten…

Android phones also have 'Encrypt Phone' feature ( since Gingerbread ) but not on by default.
Post reply on HN