Live data from Hacker News

Privacy: Is That iPhone?

foundation.mozilla.org

121–130 of 188 posts

Re: Privacy: Is That iPhone?

#121
post #34

Anyone disillusioned by the thought that Apple values privacy would be well served by reading iOS, The Future Of macOS, Freedom, Security And Privacy In An Increasingly Hostile Global Environment - https://gist.github.com/iosecure/357e724811fe04167332ef54e73... There is so much more to privacy than is made apparent to the user as a few OS knobs to "limit" ad tracking.

See also https://puri.sm/posts/apple-is-right-about-privacy-but-wrong...

Re: Privacy: Is That iPhone?

#123

Somewhat related: when i re-install Youtube or Google Home i am automatically logged in to both apps. Even if i delete the apps and wait weeks/months and then reinstall, i'm logged in again when i first open them. I have enabled "Settings > Privacy > Advertising > Limit Ad Tracking" and also cleared all Safari history. How is this possible?

I believe they store some data in your iCloud account. Uber used to do this too. The only way to get rid of it is to sign out and then again explicitly ask to delete account data on this device, then uninstall and reinstall to use the service without signing in.

Re: Privacy: Is That iPhone?

#124

Somewhat related: when i re-install Youtube or Google Home i am automatically logged in to both apps. Even if i delete the apps and wait weeks/months and then reinstall, i'm logged in again when i first open them. I have enabled "Settings > Privacy > Advertising > Limit Ad Tracking" and also cleared all Safari history. How is this possible?

The use IDFV(id for vendor) for this. It's an identifier that is shared between all apps of the same vendor.

Re: Privacy: Is That iPhone?

#125
post #67
post #64

Is IDFA carried in the http request header? Can government track this too?

No the IDFA is for native apps only and does not exist on the web. It is not exposed to websites.

Native apps use http, too. Surprise. From a middleman's perspective a native app and a website aren't too different.

Re: Privacy: Is That iPhone?

#126
post #123

Somewhat related: when i re-install Youtube or Google Home i am automatically logged in to both apps. Even if i delete the apps and wait weeks/months and then reinstall, i'm logged in again when i first open them. I have enabled "Settings > Privacy > Advertising > Limit Ad Tracking" and also cleared all Safari history. How is this possible?

I believe they store some data in your iCloud account. Uber used to do this too. The only way to get rid of it is to sign out and then again explicitly ask to delete account data on this device, then uninstall and reinstall to use the service without signing in.

Hmmm, there is no "Youtube" or "Google Home" item in "Settings > AppleID > iCloud" (where you can enable/disable iCloud access for specific apps.)

Re: Privacy: Is That iPhone?

#127
post #99
post #84

Earlier quoted context omitted.

I just looked at the location tracking preferences and the default setting for Google maps is "always", as in "whenever your phone is on". O_o

The phone will periodically ask you if you want to keep this setting.

As of iOS 13, specifically.

Re: Privacy: Is That iPhone?

#129
post #91
post #34

Anyone disillusioned by the thought that Apple values privacy would be well served by reading iOS, The Future Of macOS, Freedom, Security And Privacy In An Increasingly Hostile Global Environment - https://gist.github.com/iosecure/357e724811fe04167332ef54e73... There is so much more to privacy than is made apparent to the user as a few OS knobs to "limit" ad tracking.

Saved this writeup for future reference, thanks. Agreed that privacy needs more analysis than trusting a few rather opaque OS knobs. I am a little skeptical about some of the claims in that gist, though. One example is when they claim that APNS pushes require app access to a globally unique iOS activation identifier. That seems false. According to Apple’s dev docs at least, those tokens are device-and-app specific an…

> On iOS, there is no full-disk or full-volume encryption, only varying levels of file-based encryption, partially dependent on third-party developer choices, such that what is, and isn’t, encrypted (with encryption tied to the user passphrase) is not always clear to the end-user.

I'm not sure about this, either; all recent iOS devices have a DMA AES engine that performs encryption on anything that travels between storage and memory.

Post reply on HN