5 ms·

I hope they start encrypting them properly at some point, on device, key derived from Apple ID password etc.

Osyris 8y ago
Would that work? I'm not an iPhone user but I thought a big part of iCloud backups were for restoring a backup onto a new device.
- eugeniub 8y ago
  I think they could pull it off in a way that would result in few inaccessible backups. The decryption keys could be stored on your iCloud Keychain, so if you lose one iOS device, the backup can be decrypted with another iOS device you own. And maybe the encryption key could itself be derived from your device's passcode in some asymmetric way.
dannyw 8y ago
They can’t because it’s obvious they have a secret FISA order preventing them to. The recent iMessages in the Cloud shows this: messages are end to end encrypted in iCloud using a separate, unique key that is only stored on your devices... and this key is uploaded to your iCloud account if you have backup enabled. No choice. This is after the original version, got pulled from the beta suddenly with no reason and no widely reported bugs. The design of this irrational system only makes sense when a 3 letter agency saw it, and got FISA to compel Apple to key escrow.
- macspoofing 8y ago
  You don't actually have any proof for anything you just wrote ... and you're making very specific assertions with full confidence.
- pvg 8y ago
  it’s obvious they have a secret FISA order preventing them to. How is that obvious? And how a court do this? What would be the legal basis?
  - jplayer01 8y ago
    National security. As it always is.
    - pvg 8y ago
      That doesn't really mean anything.
- nemothekid 8y ago
  >The design of this irrational system only makes sense when a 3 letter agency saw it, and got FISA to compel Apple to key escrow. Or the more common reasoning: Apple wanted to provide a method for you to restore your new iPhone from an iCloud backup without treating your Apple ID password as an encryption key.
pat2man 8y ago
You can always backup using iTunes, which give you full encrypted backups.
- eugeniub 8y ago
  This will become an increasingly untenable solution in the future. Apple has been pushing iOS towards independence from PCs in the past couple of years, removing things such as installing apps through iTunes. Additional iOS and macOS updates could create new bugs in the iTunes/iOS sync process that Apple may not want to bother fixing anymore. They might remove iTunes backup entirely. And there are increasing numbers of iPhone users without Macs or PCs at all.

Would that work? I'm not an iPhone user but I thought a big part of iCloud backups were for restoring a backup onto a new device.

eugeniub 8y ago
I think they could pull it off in a way that would result in few inaccessible backups. The decryption keys could be stored on your iCloud Keychain, so if you lose one iOS device, the backup can be decrypted with another iOS device you own. And maybe the encryption key could itself be derived from your device's passcode in some asymmetric way.

dannyw 8y ago

They can’t because it’s obvious they have a secret FISA order preventing them to. The recent iMessages in the Cloud shows this: messages are end to end encrypted in iCloud using a separate, unique key that is only stored on your devices... and this key is uploaded to your iCloud account if you have backup enabled. No choice. This is after the original version, got pulled from the beta suddenly with no reason and no widely reported bugs. The design of this irrational system only makes sense when a 3 letter agency saw it, and got FISA to compel Apple to key escrow.

macspoofing 8y ago
You don't actually have any proof for anything you just wrote ... and you're making very specific assertions with full confidence.
pvg 8y ago
it’s obvious they have a secret FISA order preventing them to. How is that obvious? And how a court do this? What would be the legal basis?
- jplayer01 8y ago
  National security. As it always is.
  - pvg 8y ago
    That doesn't really mean anything.
nemothekid 8y ago
>The design of this irrational system only makes sense when a 3 letter agency saw it, and got FISA to compel Apple to key escrow. Or the more common reasoning: Apple wanted to provide a method for you to restore your new iPhone from an iCloud backup without treating your Apple ID password as an encryption key.

pat2man 8y ago

You can always backup using iTunes, which give you full encrypted backups.

eugeniub 8y ago
This will become an increasingly untenable solution in the future. Apple has been pushing iOS towards independence from PCs in the past couple of years, removing things such as installing apps through iTunes. Additional iOS and macOS updates could create new bugs in the iTunes/iOS sync process that Apple may not want to bother fixing anymore. They might remove iTunes backup entirely. And there are increasing numbers of iPhone users without Macs or PCs at all.