5 ms·
One thing to keep in mind is that really only two things Apple can do. The first is to release a modified and signed version of iOS to LE agencies that has any
by johnnyapol 7y ago
One thing to keep in mind is that really only two things Apple can do. The first is to release a modified and signed version of iOS to LE agencies that has any timeouts removed to allow them to try to bruteforce the passcode locks. If a user uses a significantly long password instead of a passcode, this becomes way less effective.
The second thing is to log iMessage data on the server-side (since it has to be decrypted at some point). This would allow them to produce it, but would miss any apps installed on the phone used for alternative communication.
I don't like to see this so much as Apple refusing but there really isn't a way for Apple to enable easy full access without a backdoor, which is an unrealistic expectation.
- ryukafalz 7y ago>The second thing is to log iMessage data on the server-side (since it has to be decrypted at some point). iMessage is end-to-end encrypted, so that's also not an option. Apple would have to inject a key they controlled into a user's list of device keys. (Which they can do, and the UI doesn't notify users if it were to happen.)
- johnnyapol 7y agoThanks for the clarification. I guess iCloud backups could then be a viable option then?
- ryukafalz 7y agoYes, if iCloud backups are enabled, Apple does then have the keys required to decrypt backed-up iMessage messages.
- opencl 7y agoThat seems to completely defeat the point of it being end to end encrypted in the first place.
- SpaethCo 7y agoTrue, but these days you can disable iCloud backups without giving up all that much. (it also re-keys Messages in iCloud when you turn off backups) Keychain, messages, and health data are all E2E encrypted and synced to iCloud. By not doing iCloud backups, you're basically only giving up backups of app icon placement, home/lock screen background images, app data that isn't otherwise synced via iCloud or the app's dedicated sync service, and a handful of phone settings. You can opt for the occasional iTunes backup to preserve those infrequently changing elements on the phone, and not have to compromise on recovery point for more important data like messages and security creds since all of that is synced in real time.
- dillonmckay 7y agoHow much longer will iTunes be around?
- SpaethCo 7y agoThe backup function is moving to Finder before iTunes disappears entirely.
- parliament32 7y agoThat's the whole joke. Apple pushes E2E in advertising but fails to mention how by default it's all """backed up""" in their cloud where they hold the keys. It's ridiculous.
- wool_gather 7y agoThey wouldn't be able to install the new OS over the old one without the passcode, though.
- johnnyapol 7y agoNot sure if things are in a similar state now, but it looks like the FBI and Apple had reason to believe something like this could be done. https://en.wikipedia.org/wiki/FBI%E2%80%93Apple_encryption_dispute#Apple_ordered_to_assist_the_FBI https://en.wikipedia.org/wiki/FBI%E2%80%93Apple_encryption_d... Although it seems like it would be a RAM-only thing
- wool_gather 7y agoI suppose that's true, potentially they could release a new firmware or OS that would enable this in the future.
- whamlastxmas 7y agoMy understanding is the passcode and timeout behavior is on dedicated hardware that's tied to the OS level encryption. It's not possible (or maybe just not feasible) to replace or update this hardware.