4 ms·
Don't get me wrong, I'm impressed with the progress Apple has made in spearheading consumer privacy practices — but unfortunately, half of the benefits listed h
by jakejarvis 7y ago
Don't get me wrong, I'm impressed with the progress Apple has made in spearheading consumer privacy practices — but unfortunately, half of the benefits listed here are negated by the fact that my iCloud backups are fully unencrypted (or "encrypted" with a common key that Apple holds; same thing in my view).
So, if I want convenient nightly backups (without plugging my phone in and using the "new" Catalina apps, which I'm still convinced are just new iTunes skins), Apple — and adversaries — will still have unfettered access to all my iMessages, Maps history, photos, health records, almost everything listed here and more [0][1].
Tim Cook has claimed a fix is coming for a while now [2], but meanwhile using iCloud for its intended purpose is a huge, and largely unadvertised, gaping hole in Apple's otherwise impressive privacy promises. :(
[0] https://www.theverge.com/2016/3/2/11144588/walt-mossberg-apple-vs-fbi-iphone-icloud-loophole https://www.theverge.com/2016/3/2/11144588/walt-mossberg-app...
[1] https://www.cellebrite.com/en/productupdates/move-your-investigations-forward-with-data-from-icloud-and-samsung-backups/ https://www.cellebrite.com/en/productupdates/move-your-inves...
[2] https://www.macrumors.com/2019/02/28/eff-user-encrypted-icloud-backups-apple/ https://www.macrumors.com/2019/02/28/eff-user-encrypted-iclo...
- thephyber 7y ago> if I want convenient nightly backups (without plugging my phone in ...) I haven't found a need for iCloud. I get regular (daily?) backups to my Apple desktops/laptops over WiFi -- it works after you pair the mobile device with the desktop once and check the sync over WiFi box.
- ls612 7y agoIt’s largely only a hole against state level adversaries, which may not be a realistic element of many people’s threat model.
- bberenberg 7y agoState being anyone who can get a court order, including another company or individual with legal grounds to peruse you.
- deleted 7y ago[deleted]
- yumraj 7y agoOr an insider at Apple. Please refer to the recent issue regarding Saudis and Twitter. You can argue that that was a state level adversary, but the people who accessed data could as well may have done that of their own volition.