5 ms·

> By default every iPhone logs and sends to the mothership your gps locations. > They designed iMessage in a way that ensured they could access the conversatio

> By default every iPhone logs and sends to the mothership your gps locations. > They designed iMessage in a way that ensured they could access the conversation Neither of these sound correct. Can you explain more or link a source on either?

cm2187 9y ago
On locations: https://support.apple.com/en-gb/HT207056 https://support.apple.com/en-gb/HT207056 (it is enabled by default) On iMessage, the encryption keys are managed and accessible by Apple. Steve Gibson makes regular references in his podcast, like this episode: https://www.grc.com/sn/sn-574.htm https://www.grc.com/sn/sn-574.htm
- tomduncalf 9y ago
  > enabled by default Actually, the device asks during setup whether you want to enable location services or not. They are also configurable per-app, obviously
  - cm2187 9y ago
    That’s to switch off all GPS. To disable the logging/upload to mothership, the settings is buried in Settings/Privacy/Location Services/System Services.
    - wmeredith 9y ago
      Right. So location services are absolutely not enabled by default. You have to turn them on.
- willstrafach 9y ago
  If you’re not an iPhone user you may not be clear on this, as I see the help page isn’t explicit, but during setup it actually asks if you want to allow Location Services and you can turn it off as a whole right there. No default exists for it, as it is a yes/no selection on initial setup (And if yes, you still need to approve each app’s access, but you might be thinking of how it is auto-enabled by default for system services after you initially opt to turn on location services). For iMessage, I think you are getting something mixed up. Apple does not have your encryption keys, but like Signal it does control the server used to retrieve keys for your interlocutor(s). This is a trade-off based on the fact that most iPhone buyers likely do not have a desire to run their own server nor would they probably be able to get their friends to all use it. However, apps are available in the App Store if you do want to do that.

cm2187 9y ago

On locations: https://support.apple.com/en-gb/HT207056 https://support.apple.com/en-gb/HT207056 (it is enabled by default) On iMessage, the encryption keys are managed and accessible by Apple. Steve Gibson makes regular references in his podcast, like this episode: https://www.grc.com/sn/sn-574.htm https://www.grc.com/sn/sn-574.htm

tomduncalf 9y ago
> enabled by default Actually, the device asks during setup whether you want to enable location services or not. They are also configurable per-app, obviously
- cm2187 9y ago
  That’s to switch off all GPS. To disable the logging/upload to mothership, the settings is buried in Settings/Privacy/Location Services/System Services.
  - wmeredith 9y ago
    Right. So location services are absolutely not enabled by default. You have to turn them on.
willstrafach 9y ago
If you’re not an iPhone user you may not be clear on this, as I see the help page isn’t explicit, but during setup it actually asks if you want to allow Location Services and you can turn it off as a whole right there. No default exists for it, as it is a yes/no selection on initial setup (And if yes, you still need to approve each app’s access, but you might be thinking of how it is auto-enabled by default for system services after you initially opt to turn on location services). For iMessage, I think you are getting something mixed up. Apple does not have your encryption keys, but like Signal it does control the server used to retrieve keys for your interlocutor(s). This is a trade-off based on the fact that most iPhone buyers likely do not have a desire to run their own server nor would they probably be able to get their friends to all use it. However, apps are available in the App Store if you do want to do that.