Live data from Hacker News

Apple pulls data protection tool after UK government security row

bbc.com

621–630 of 1001 posts

Re: Apple pulls data protection tool after UK government security row

#622
post #106

Too right, it was far more problematic than they ever made out. > The UK government's demand came through a "technical capability notice" under the Investigatory Powers Act (IPA), requiring Apple to create a backdoor that would allow British security officials to access encrypted user data globally. The order would have compromised Apple's Advanced Data Protection feature, which provides end-to-end encryption for iCl…

> you think Google didn't already sign up to this? My understanding is that Android's Google Drive backup has had an E2E encryption option for many years (they blogged about it at https://security.googleblog.com/2018/10/google-and-android-h... ), and that the key is only stored locally in the Titan Security Module. If they are complying with the IPA, wouldn't that mean that they must build a mechanism into Android to…

[deleted]

Re: Apple pulls data protection tool after UK government security row

#623

I'm sympathetic to the J.D. Vance angle, which is that European governments are increasingly scared of their own people. This is not doing a lot to change my mind.

What the fuck? They should be. They absolutely aren't right now and that's a major problem.

Re: Apple pulls data protection tool after UK government security row

#624

Earlier quoted context omitted.

That doesn't help. Next they'll come for the privacy phones.

[flagged]

New Law: "Usage of an unsanctioned phone by a manufacturer not certified as meeting the UK privacy standards is illegal to operate.".

You fight the less draconian draconian law to avoid needing to fight the worse one.

Re: Apple pulls data protection tool after UK government security row

#625

>Online privacy expert Caro Robson said she believed it was "unprecedented" for a company "simply to withdraw a product rather than cooperate with a government. That is such a self serving comment. If Apple provides UK a backdoor, it weakens all users globally. With this they are following the local law and the country deserves what the rulers of the country want. These experts are a bit much. In the next paragraph t…

>"It would be a very, very worrying precedent if other communications operators felt they simply could withdraw products and not be held accountable by governments,"

This would actually be a very very very very VERY GOOD precedent if you ask me.

Facebook pulled something similar when Canada passed the Online News Act and instead of extorting facebook to pay the media companies for providing a service to them (completely backasswards way to do things), they just pulled news out of Canada. I despise Meta as a company, but I had to give them credit for not just letting the government shake them down.

Good riddance. Governments need to be reminded from time to time that they are, in fact, not Gods. We can and should, just take our ball and go play in a different park or just go home rather than obey insane unjust laws.

Re: Apple pulls data protection tool after UK government security row

#626
post #488

Earlier quoted context omitted.

Just to be clear: Wallace is not a head of state, or even an MP any more. At one point, he was Secretary of State for Defence, a Cabinet position, however he resigned this in 2023. This doesn’t justify his position (it’s stupid) but he doesn’t speak for the current government.

To clarify a bit further, the UK head of state is King Charles III, as he is for a bunch of other countries in the Commonwealth. Head of state in the UK is a bit weird compared to countries that abolished or never had a monarchy.

The vast majority of democracies separated the roles of head of state and head of government.

Re: Apple pulls data protection tool after UK government security row

#627
post #619

Earlier quoted context omitted.

> you think Google didn't already sign up to this? My understanding is that Android's Google Drive backup has had an E2E encryption option for many years (they blogged about it at https://security.googleblog.com/2018/10/google-and-android-h... ), and that the key is only stored locally in the Titan Security Module. If they are complying with the IPA, wouldn't that mean that they must build a mechanism into Android to…

My assumption is that Google has keys to everything in its kingdom [1]. [1] https://qz.com/1145669/googles-true-origin-partly-lies-in-ci...

> My assumption is that Google has keys to everything in its kingdom

If that were true, then their claims to support E2E encrypted backups are simply false, and they would have been subject to warrants to unlock backups, just like Apple had been until they implemented their "Advanced Data Protection" in 2022.

Wouldn't there have been be some evidence of that in the past 7 years, either through security research, or through convictions that hinged on information that was gotten from a supposedly E2E-protected backup?

Re: Apple pulls data protection tool after UK government security row

#628
post #578

Earlier quoted context omitted.

That would be none, as it was the FBI, operating independently (as it's supposed to), which tried to force the issue. They even tried to go to Congress but found little support for their stunt. I'm not even sure Obama ever spoke in support of the backdoor, much less used any political power to make it a reality.

Sorry, but the FBI is part of the executive branch. This is exactly like saying that President Trump has nothing to do with the actions of the executive branch agencies today.

it's true that the honour system only works when there's honour in the people in charge.

when a clown moves into a palace, the clown doesn't become the king - the palace becomes a circus.

Re: Apple pulls data protection tool after UK government security row

#629

Earlier quoted context omitted.

> What concerns me more is that Apple is the only company audibly making a stand. But still Apple operates in China and Google does not. This is weird to me. Google left China when the government wanted all keys to the citizens data. Apple is making a stand when it's visible and does not threaten their business too much. Apple is not really in the business of protecting your data, they are just good at marketing and…

Perhaps Apple has a greater leverage in China due to its outsized manufacturing presence. And it's likely they already dont offer ADP to Chinese citizens.

lol you think Apple has more leverage than China? What world are you living in?

Re: Apple pulls data protection tool after UK government security row

#630

Earlier quoted context omitted.

[flagged]

New Law: "Usage of an unsanctioned phone by a manufacturer not certified as meeting the UK privacy standards is illegal to operate.". You fight the less draconian draconian law to avoid needing to fight the worse one.

[flagged]
Post reply on HN