5 ms·

If you're paranoid, making a complete copy of all your secrets on some remote Apple or Google "cloud" where the government can get at it trivially is the exact

If you're paranoid, making a complete copy of all your secrets on some remote Apple or Google "cloud" where the government can get at it trivially is the exact opposite of what you want to be doing.

sounds 11y ago
Well, yeah, if you back it up with a 3rd party backup tool, you are trusting the 3rd party. I recommend you make a backup to your laptop, which you then encrypt manually. That way the trust model is: you trust yourself. Then you can do whatever you want with the encrypted file. Apple's iCloud is perfectly fine at this point. The real challenge is to find a way to restore that backup, because you have to be on a computer you trust. If you decrypt the backup on a "loaner" laptop, your security is broken. If you decrypt the backup on your personal laptop but the laptop has a hidden keylogger installed by the TSA or TAO, your security is broken. It would be necessary to backup the phone on the _phone_ _itself_. Then manually encrypt the file (easy to do). Then upload to iCloud. At this time, no such app exists for iOS. Since you plan to restore the backup to the phone anyway, it's no problem to decrypt a file on the phone before using it for the restore.
- baddox 11y ago
  > I recommend you make a backup to your laptop, which you then encrypt manually. You mean your laptop that was manufactured by a 3rd party, with a network card that was manufactured by a 3rd party? And you're using encryption software that, even if it's open source, you probably aren't qualified to code review. I'm not downplaying the benefit of being careful, but unfortunately you can keep doing that pretty much forever.
- grecy 11y ago
  All laptops and cameras entering the US are subject to search and seizure.
greggman 11y ago
What data is likely on someone's phone that is not also in the cloud one way or another?
- marssaxman 11y ago
  I wonder this too. The only personal data on my phone are my text and email messages. I'm not sure how other data would get onto the phone.
sb057 11y ago
If you're paranoid, you don't have a cell phone.
- ska 11y ago
  Or you have several, and send them on trips without you, etc.
nevir 11y ago
There's a reason Google decided to encrypt all communication between machines inside their datacenters.
- lorenzhs 11y ago
  Are you sure it's not just communication between data centres?
  - deleted 11y ago
    [deleted]
  - evgen 11y ago
    Probably not. FB is doing the same thing. In most cases your app or service does not actually know if the remote service it is talking to is local or in another DC. Yes, you can find out if you need to, but that requires contacting another service and introduces some delay and latency. Use a service router to try to keep the calls local to a rack or a DC, but you know that if there are problems with local cells you might get routed across the country so start with the assumption that _all_ connections get encrypted even if the connection is to localhost.
hutattedonmyarm 11y ago
Well you can make an encrypted Backup via iTunes (that would involve firing up iTunes though shudders)
katbyte 11y ago
backup ==> zip/rar => encrypt with pgp or whatever => split => upload various parts to different cloud storage providers => wipe device => pass checkpoint => download => combine => decrpy => uncompress => restore. its not trivial, but its sure easy to do in this day and age.

If you're paranoid, making a complete copy of all your secrets on some remote Apple or Google "cloud" where the government can get at it trivially is the exact opposite of what you want to be doing.

sounds 11y ago

Well, yeah, if you back it up with a 3rd party backup tool, you are trusting the 3rd party. I recommend you make a backup to your laptop, which you then encrypt manually. That way the trust model is: you trust yourself. Then you can do whatever you want with the encrypted file. Apple's iCloud is perfectly fine at this point. The real challenge is to find a way to restore that backup, because you have to be on a computer you trust. If you decrypt the backup on a "loaner" laptop, your security is broken. If you decrypt the backup on your personal laptop but the laptop has a hidden keylogger installed by the TSA or TAO, your security is broken. It would be necessary to backup the phone on the _phone_ _itself_. Then manually encrypt the file (easy to do). Then upload to iCloud. At this time, no such app exists for iOS. Since you plan to restore the backup to the phone anyway, it's no problem to decrypt a file on the phone before using it for the restore.

baddox 11y ago
> I recommend you make a backup to your laptop, which you then encrypt manually. You mean your laptop that was manufactured by a 3rd party, with a network card that was manufactured by a 3rd party? And you're using encryption software that, even if it's open source, you probably aren't qualified to code review. I'm not downplaying the benefit of being careful, but unfortunately you can keep doing that pretty much forever.
grecy 11y ago
All laptops and cameras entering the US are subject to search and seizure.

greggman 11y ago

What data is likely on someone's phone that is not also in the cloud one way or another?

marssaxman 11y ago
I wonder this too. The only personal data on my phone are my text and email messages. I'm not sure how other data would get onto the phone.

sb057 11y ago

If you're paranoid, you don't have a cell phone.

ska 11y ago
Or you have several, and send them on trips without you, etc.

nevir 11y ago

There's a reason Google decided to encrypt all communication between machines inside their datacenters.

lorenzhs 11y ago
Are you sure it's not just communication between data centres?
- deleted 11y ago
  [deleted]
- evgen 11y ago
  Probably not. FB is doing the same thing. In most cases your app or service does not actually know if the remote service it is talking to is local or in another DC. Yes, you can find out if you need to, but that requires contacting another service and introduces some delay and latency. Use a service router to try to keep the calls local to a rack or a DC, but you know that if there are problems with local cells you might get routed across the country so start with the assumption that _all_ connections get encrypted even if the connection is to localhost.

hutattedonmyarm 11y ago

Well you can make an encrypted Backup via iTunes (that would involve firing up iTunes though shudders)

katbyte 11y ago

backup ==> zip/rar => encrypt with pgp or whatever => split => upload various parts to different cloud storage providers => wipe device => pass checkpoint => download => combine => decrpy => uncompress => restore. its not trivial, but its sure easy to do in this day and age.