disables apple cloud sync
Apple pulls data protection tool after UK government security row
171–180 of 1001 posts
Re: Apple pulls data protection tool after UK government security row
#172Too right, it was far more problematic than they ever made out. > The UK government's demand came through a "technical capability notice" under the Investigatory Powers Act (IPA), requiring Apple to create a backdoor that would allow British security officials to access encrypted user data globally. The order would have compromised Apple's Advanced Data Protection feature, which provides end-to-end encryption for iCl…
> have an Android device beside me that regularly asks me to back my device up to the cloud But is that backup encrypted? If it's not, all they need is to access your data. This is about having access to backups that are theoretically encrypted with a key Apple doesn't have? > We're talking about the largest back door I've ever heard of. Doesn't the US have access to all the data of non US citizens whose data is stor…
> Doesn't the US have access to all the data of non US citizens whose data is stored in the US without any oversight?
Er, no...? I'm not sure where you get that idea. Access requires a warrant, and companies are not compelled to build systems which enable them to decrypt all data covered by the warrant.
See, for example, the Las Vegas shooter case, where Apple refused to create an iOS build that would bypass iCloud security.
Re: Apple pulls data protection tool after UK government security row
#173Earlier quoted context omitted.
I'm guessing this is because they haven't figured out a way to do it yet. I'm not very well versed in how these systems work but surely this type of encryption can't be disabled by Apple remotely (or they would have that backdoor they don't want)?
The Bloomberg article has a little more detail about this: > Customers already using Advanced Data Protection, or ADP, will need to manually disable it during an unspecified grace period to keep their iCloud accounts. The company said it will issue additional guidance in the future to affected users and that it does not have the ability to automatically disable it on their behalf.
Wow, thanks for sharing! I thought that might be the case but "disable it or we'll have to nuke your data" seems so extreme I thought there must be a better way.
Re: Apple pulls data protection tool after UK government security row
#174Earlier quoted context omitted.
It isn't really a precedent. Companies, even high-rolling American tech companies, have to abide by the laws and regulations of the countries that they operate in. I guess there is a question of whether this is a legal demand that they truly had to follow, or just a request, and whether they could fight it in court, but Apple seems to be hoping to adjudicate it in the court of public opinion (apparently the initial b…
> abide by the laws and regulations of the countries that they operate in. In this case, the UK is seeking to use local law to change what is allowable on an international basis. That's a bit different than a nation controlling the law on their own soil.
That was Apple's interpretation : That to comply with what the UK requested they would have to have the same thing everywhere.
But of course that is nonsense, and Apple could theoretically have a nation-specific backdoor (e.g. for accounts in a given country a separate sequestered decryption key is created and kept in escrow for court order).
I mean, Apple "complied" by disabling ADP just in the UK. They undermined their own "worldwide" claim, as ADP still works everywhere else, and the UK has no access.
Re: Apple pulls data protection tool after UK government security row
#175It's the right choice: don't bow to government pressure, let the people pressure the government.
NO, it's the wrong choice. Most people do not understand this stuff enough to truly care about, and they just want their devices to work. This is an awful decision by Apple. There's really nothing consumers can do to pressure the British government.
Re: Apple pulls data protection tool after UK government security row
#176Re: Apple pulls data protection tool after UK government security row
#177It's the right choice: don't bow to government pressure, let the people pressure the government.
How? In the UK, there's no right to bear arms, so people are pretty helpless against their oppressing government.
Technically I guess you're right, but one hopes that the foundations of British democracy provide its citizens with the tools to fight against an oppressive government. The only rub is getting them to stand up and do that.
Re: Apple pulls data protection tool after UK government security row
#178It's the right choice: don't bow to government pressure, let the people pressure the government.
NO, it's the wrong choice. Most people do not understand this stuff enough to truly care about, and they just want their devices to work. This is an awful decision by Apple. There's really nothing consumers can do to pressure the British government.
Those people aren’t enabling ADP to begin with.
Re: Apple pulls data protection tool after UK government security row
#179Earlier quoted context omitted.
> other than the possibility of leaks of the nation’s most sensitive data Amusing when you consider the National Cyber Security Centre (NCSC, a part of GCHQ), along with the Information Commissioners Office, both publish guidance recommending, and describing how to use, encryption to protect personal and sensitive data. Our government is almost schizophrenic in its attitude to encryption.
Correct me if I'm wrong here, and maybe this is too charged for HN, but looking over at you guys from the US: The US has problems (don't get me wrong, look at our politics, enough said); but the UK seems to be speedrunning a collapse. The NHS having patients dying in hallways; Rotherham back in the popular mind; a bad economy even by EU standards; a massive talent exodus (as documented even on HN regarding hardware e…
I'm an immigrant to the UK. I have lived here permanently for 21 successive years, though I was actually in and out of the UK for years before that. My current anecdotal feeling about the UK is at a pretty low point.
If it was an option, I would seriously look to emigrate again, but I honestly don't know where. The most appealing option for me is Australia, but my age works against me. I know everywhere has its issues, but I'm just so worn down by the horrible adversarial political system and gutter press in the UK right now. We seem unable to do anything of note recently. A train line connecting not very much of the UK has cost so much money, and in the end it hasn't even joined up the important part.
I don't know, life is good at a local level. I am privileged and live in a fantastically beautiful town, and life here is safe and friendly. If I ignored everything else for a while it would probably do me good.
Re: Apple pulls data protection tool after UK government security row
#180Ok, I am not very technical. Can someone help me understand this. I don't have Advanced data Protection on. Does that mean UK Gov can see my data now?