3 ms·

If unencrypted iCloud back ups is the price for us getting to keep fully encrypted devices, so be it

by thathndude 7y ago

alfiedotwtf 7y ago
If backups aren't encrypted, then neither is your device
- JoBrad 7y ago
  You can back them up locally.
  - drdaeman 7y ago
    But you can't do so automatically. You have to open iTunes (or Finder) and explicitly click a button. If Apple is privacy-oriented, they should've allowed this long time ago. Unlike iCloud backups, this is certainly not a legal issue, as the "local" backups stored on one's computer are already fully encrypted.
    - linusnext 7y ago
      True or not, you have my apathy and my down vote.* * My memory says I spent way too much on an iPhone. My ego says that can't be true, and in the end memory yields. -nietzsche
    - codedokode 7y ago
      If Apple were privacy-oriented then they would at least add a big red warning about reversible encryption when turning on cloud backups.
  - neop1x 7y ago
    I like it. If you want, you can make local encrypted backup. If you are lazy (and lots of terrorists and drug dealers probably are) you just flip the iCloud switch on at the first prompt. :) I have read that airport security is also not 100% effective but it is enough for these kinds of problematic people.
    - alfiedotwtf 7y ago
      If you re-remember to flip the switch back. I was SHOCKED that my Apple Time Machine backup of my encrypted drive after restore was NOT encrypted!
- thathndude 7y ago
  But backups to iCloud are optional. Apple has to strike a balance. This is cliche as can be, but the trade off is security for convenience. Fact is, iOS is consumed largely by people who want convenience. They don’t want to lose all of their data if they forget their passwords. But for those people who are ok with that type of unforgiving paradigm, then don’t use iCloud backups, and you’re all set.
  - sitkack 7y ago
    > Apple has to strike a balance. I see this in the thread. What does that mean? Do they have to? Are they being forced? What is the balance between? Why aren't iCloud backups e2e encrypted?
Defenestresque 7y ago
If Google is able to introduce this then why can't Apple? >Starting in Android Pie, devices can take advantage of a new capability where backed-up application data can only be decrypted by a key that is randomly generated at the client. This decryption key is encrypted using the user's lockscreen PIN/pattern/passcode, which isn’t known by Google. >By design, this means that no one (including Google) can access a user's backed-up application data without specifically knowing their passcode. https://security.googleblog.com/2018/10/google-and-android-have-your-back-by.html https://security.googleblog.com/2018/10/google-and-android-h...

If unencrypted iCloud back ups is the price for us getting to keep fully encrypted devices, so be it

alfiedotwtf 7y ago

If backups aren't encrypted, then neither is your device

JoBrad 7y ago
You can back them up locally.
- drdaeman 7y ago
  But you can't do so automatically. You have to open iTunes (or Finder) and explicitly click a button. If Apple is privacy-oriented, they should've allowed this long time ago. Unlike iCloud backups, this is certainly not a legal issue, as the "local" backups stored on one's computer are already fully encrypted.
  - linusnext 7y ago
    True or not, you have my apathy and my down vote.* * My memory says I spent way too much on an iPhone. My ego says that can't be true, and in the end memory yields. -nietzsche
  - codedokode 7y ago
    If Apple were privacy-oriented then they would at least add a big red warning about reversible encryption when turning on cloud backups.
- neop1x 7y ago
  I like it. If you want, you can make local encrypted backup. If you are lazy (and lots of terrorists and drug dealers probably are) you just flip the iCloud switch on at the first prompt. :) I have read that airport security is also not 100% effective but it is enough for these kinds of problematic people.
  - alfiedotwtf 7y ago
    If you re-remember to flip the switch back. I was SHOCKED that my Apple Time Machine backup of my encrypted drive after restore was NOT encrypted!
thathndude 7y ago
But backups to iCloud are optional. Apple has to strike a balance. This is cliche as can be, but the trade off is security for convenience. Fact is, iOS is consumed largely by people who want convenience. They don’t want to lose all of their data if they forget their passwords. But for those people who are ok with that type of unforgiving paradigm, then don’t use iCloud backups, and you’re all set.
- sitkack 7y ago
  > Apple has to strike a balance. I see this in the thread. What does that mean? Do they have to? Are they being forced? What is the balance between? Why aren't iCloud backups e2e encrypted?

Defenestresque 7y ago

If Google is able to introduce this then why can't Apple? >Starting in Android Pie, devices can take advantage of a new capability where backed-up application data can only be decrypted by a key that is randomly generated at the client. This decryption key is encrypted using the user's lockscreen PIN/pattern/passcode, which isn’t known by Google. >By design, this means that no one (including Google) can access a user's backed-up application data without specifically knowing their passcode. https://security.googleblog.com/2018/10/google-and-android-have-your-back-by.html https://security.googleblog.com/2018/10/google-and-android-h...