6 ms·

Don't they use Google Cloud for ICloud storage?

by jimmy1 8y ago

ivanfon 8y ago
Looks like they use Google Cloud and AWS. I assume they’ve built their platform in a way that they can easily use many different providers. https://www.theverge.com/2018/2/26/17053496/apple-google-cloud-platform-icloud-confirmation https://www.theverge.com/2018/2/26/17053496/apple-google-clo...
MBCook 8y ago
I believe so but that’s an implementation detail. They could switch to AWS or Azure.
zwily 8y ago
They heavily use AWS, Google Cloud, and Azure.
- george_perez 8y ago
  Not anymore for Azure. Google Cloud replaced Azure for them. https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf Control (Command) + F and there's no mention of Azure anymore.
deleted 8y ago
[deleted]
tinus_hn 8y ago
They use multiple types of cloud storage; the data is encrypted and Google isn’t processing it, just storing it.
- Klonoar 8y ago
  A common misconception - parts of iCloud data are encrypted at rest, but a good chunk of it is not. They've indicated they want to get there at various points in the past, but unless I've missed an update it's not there currently.
  - twunde 8y ago
    Agreed. It's the main reason why iCloud isn't HIPAA compliant
    - bogomipz 8y ago
      Using multiple storage providers makes iCloud non-HIPAA compliant? Or did you mean something else?
  - conradev 8y ago
    The files are still encrypted at rest (using convergent encryption) to obscure their contents from the underlying storage service, but Apple holds the keys: > Each file is broken into chunks and encrypted by iCloud using AES-128 and a key derived from each chunk’s contents that utilizes SHA-256. The keys and the file’s metadata are stored by Apple in the user’s iCloud account. The encrypted chunks of the file are stored, without any user-identifying information, using third-party storage services, such as S3 and Google Cloud Platform. https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf (page 56)
    - yborg 8y ago
      >Apple holds the keys Unless you live in China, in which case Apple and the Chinese government hold the keys.
      - threeseed 8y ago
        We don't know this to be the case. Unless you some evidence to the contrary ?
        simonh 8y ago
        The Chinese government made Apple hand over control ofiCloud infrastructure in China to a Chinese company. So those encryption keys stored in iCloud are now in the hands of aChinese company subject to Chinese government control. Not exactly an ideal arrangement, but it was likely that or switch off iCloud in China, or pull out of China completely. Which to be fair Google actually did.

Don't they use Google Cloud for ICloud storage?

by jimmy1 8y ago

Don't they use Google Cloud for ICloud storage?

Looks like they use Google Cloud and AWS. I assume they’ve built their platform in a way that they can easily use many different providers. https://www.theverge.com/2018/2/26/17053496/apple-google-cloud-platform-icloud-confirmation https://www.theverge.com/2018/2/26/17053496/apple-google-clo...

MBCook 8y ago

I believe so but that’s an implementation detail. They could switch to AWS or Azure.

zwily 8y ago

They heavily use AWS, Google Cloud, and Azure.

george_perez 8y ago
Not anymore for Azure. Google Cloud replaced Azure for them. https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf Control (Command) + F and there's no mention of Azure anymore.

deleted 8y ago

[deleted]

tinus_hn 8y ago

They use multiple types of cloud storage; the data is encrypted and Google isn’t processing it, just storing it.

Klonoar 8y ago
A common misconception - parts of iCloud data are encrypted at rest, but a good chunk of it is not. They've indicated they want to get there at various points in the past, but unless I've missed an update it's not there currently.
- twunde 8y ago
  Agreed. It's the main reason why iCloud isn't HIPAA compliant
  - bogomipz 8y ago
    Using multiple storage providers makes iCloud non-HIPAA compliant? Or did you mean something else?
- conradev 8y ago
  The files are still encrypted at rest (using convergent encryption) to obscure their contents from the underlying storage service, but Apple holds the keys: > Each file is broken into chunks and encrypted by iCloud using AES-128 and a key derived from each chunk’s contents that utilizes SHA-256. The keys and the file’s metadata are stored by Apple in the user’s iCloud account. The encrypted chunks of the file are stored, without any user-identifying information, using third-party storage services, such as S3 and Google Cloud Platform. https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf (page 56)
  - yborg 8y ago
    >Apple holds the keys Unless you live in China, in which case Apple and the Chinese government hold the keys.
    - threeseed 8y ago
      We don't know this to be the case. Unless you some evidence to the contrary ?
      - simonh 8y ago
        The Chinese government made Apple hand over control ofiCloud infrastructure in China to a Chinese company. So those encryption keys stored in iCloud are now in the hands of aChinese company subject to Chinese government control. Not exactly an ideal arrangement, but it was likely that or switch off iCloud in China, or pull out of China completely. Which to be fair Google actually did.