Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple pulls data protection tool after UK government security row

bbc.com

Post reply on HN
Print view View original

901–910 of 1001 posts

Re: Apple pulls data protection tool after UK government security row

#901

Post by kbolino »

Twisell wrote: post #806
kbolino wrote: post #727

Earlier quoted context omitted.

The hardware will not allow this, at least not without modifications. The encryption keys are not exportable from the Secure Enclave, not even to Apple's own servers.

The Apple security paper describe how to disable ADP through a key rotation sequence. This will be a "forced rotation", they just need to decide how to communicate to users and work out what happens to those who don't comply. Lockout until key rotation look like an option as someone said.

Yeah, this seems the most likely thing to happen here. You'll be forced to disable ADP to continue using iCloud in the UK. This still leaves the question of tourists and other visitors, but it at least fits within the parameters of the system without changing its fundamentals.

Re: Apple pulls data protection tool after UK government security row

#903

Post by Ylpertnodi »

retinaros wrote: post #824

concessions afer concessions we gave away our freedom. the axis of good is mostly responsible for this but the opposition also wanted to remove anonymity and freedom from the web. no one fought when the democrats called snowden or assange russian spys for revealing clinton corruption. they just blindly sided with their own corrupt political party and gave away freedom. just like previous govs censored trump, banned p…

...you go first. I'll applaud, and call everyone else over, if anything interesting happens.

Re: Apple pulls data protection tool after UK government security row

#905

Post by neop1x »

bArray wrote: post #106

Too right, it was far more problematic than they ever made out. > The UK government's demand came through a "technical capability notice" under the Investigatory Powers Act (IPA), requiring Apple to create a backdoor that would allow British security officials to access encrypted user data globally. The order would have compromised Apple's Advanced Data Protection feature, which provides end-to-end encryption for iCl…

For photos, it's probably best to use an open-source (also self-hostable) service like Ente. For files it's best to self-host Nextcloud or similar. And rely on other people's computers as little as possible. Sadly, operating systems are very complex and mostly composed of proprietary blobs nowadays so there is still a risk of it leaking data but people can still do at least something.

Re: Apple pulls data protection tool after UK government security row

#906

Post by biztos »

sureIy wrote: post #888
sholladay wrote: post #797

So many questions around this that need answering, such as: 1. What happens if I have ADP enabled and then visit the UK? Will photos I take there still be E2E encrypted? If not, will I be notified? I realize that at the moment the answer is yes, that for now, they are only disabling ADP enrollment. But they are planning to turn it off for everyone in the UK in the future. So what happens then? 2. If they make an exce…

These are important questions, particularly 2 because even a layover in London or Dublin puts you under UK jurisdiction. So now you have to put that into account when traveling. The precedent here is China. I spent a few days in China and, as far as I know, my region is still and ADP is still active.

How does a layover in Dublin put you in UK jurisdiction?

I have seen advice in big companies to only take a burner phone when going to China on business. Perhaps the same will apply to the UK.

Re: Apple pulls data protection tool after UK government security row

#907

Post by polshaw »

sib wrote: post #882
GJim wrote: post #645

Earlier quoted context omitted.

> one UK head of state What on earth are you talking about? Charles III is head of state, and before that, Liz II. The monarch absolutely does not get involved in politics.

>> The monarch absolutely does not get involved in politics. The monarch picks the Prime Minister, no? That seems pretty involved.

No, the monarch does not pick the Prime Minister. At all.

They have a ceremonial role in confirming them. Like they do with every law that Parliament creates. If they ever actually practically exercised this theoretical power it would be the end of the monarchy.

Re: Apple pulls data protection tool after UK government security row

#908

Post by polshaw »

gleenn wrote: post #405
kingkongjaffa wrote: post #380

Earlier quoted context omitted.

> Especially in the UK which operates as a paternalistic state and enjoys authoritarian support across all parties. This seemed strange to point out. It’s not really any more or less “paternalistic” than most western nations including the US.

If you see a red car driving down the street do you not call it red because there are many other red cars? They're adding color (pun intended) to their description of the general bias of the UK government. What you're doing is called Whataboutism - the argument that others are doing something similar or as bad in different contexts. It doesn't make what the UK is doing any less bad for citizens (and non-citizens) pri…

You don't say it's "especially" red then do you. The comparison was started by the GP.

Re: Apple pulls data protection tool after UK government security row

#909

Post by sandblast »

donbox wrote: post #754
throwaway106382 wrote: post #625

Earlier quoted context omitted.

>"It would be a very, very worrying precedent if other communications operators felt they simply could withdraw products and not be held accountable by governments," This would actually be a very very very very VERY GOOD precedent if you ask me. Facebook pulled something similar when Canada passed the Online News Act and instead of extorting facebook to pay the media companies for providing a service to them (complet…

I love their products: whatsapp and facebook

Why?

Re: Apple pulls data protection tool after UK government security row

#910

Post by AlgebraFox »

wishfish wrote: post #742
kouru225 wrote: post #267

I’m at the point where I’m ready to get a pixel and install graphene

I'm in a similar position. Strongly considering replacing my iPhone with a Pixel. But I realize I'm vulnerable via cloud services. GrapheneOS won't save me from someone poking through my Dropbox. I'll have to find another option for that too.

Nextcloud works great on GrapheneOS if you are willing to self host.
Post reply on HN