11 ms·
FBI serves warrant on Apple to access Senator's iCloud data
- intopieces 6y agoIt's my understanding that iCloud data will be handed over, because it's not encrypted. Is that correct?
- alfalfasprout 6y agoYep. That's the compromise. If you want full encryption don't use iCloud backups (instead using wifi backups).
- rubatuga 6y agoOr if you use Linux, you can use libimobiledevice! I use it to back up my iPhone to a ZFS drive with snapshots.
- henriquez 6y agoiCloud data is "encrypted" but Apple has the keys and can decrypt it. Apple has been wishy-washy and has actually backed away from announced plans to implement E2E encryption for iCloud with the DOJ whining about wanting backdoors every couple of years. Burr's previous support of encryption bans is ironic here; maybe now he wishes he hadn't made it politically impossible for Apple to protect his own data: https://www.wired.com/2016/04/senates-draft-encryption-bill-privacy-nightmare/ https://www.wired.com/2016/04/senates-draft-encryption-bill-...
- azinman2 6y agoI don’t think this is accurate at all. Edit: You can find details here: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303
- henriquez 6y agoHere's the breakdown of iCloud's security: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 Some features are E2E encrypted, but iCloud file storage is not.
- jdillaaa 6y agoThat's pretty accurate. Some stuff is encrypted with the device passcode like Health data and Keychain data. Around iOS 9 [1], Apple implemented some functionality to encrypt backups through a similar mechanism. This never panned out. 1) https://wccftech.com/ios-93-prompt-passcode-restoring-encrypted-icloud-backup/ https://wccftech.com/ios-93-prompt-passcode-restoring-encryp... Edit: as others have pointed out, looks like this never happened because the FBI said no.
- SanchoPanda 6y agoAn alternate explanation is that this never occurred because if people lose their passwords they would be completely out of luck.
- saagarjha 6y agoThe link you posted supports the point you're claiming is not accurate. Only a few categories of iCloud data are end-to-end encrypted so that Apple cannot access them.
- adwi 6y agoWith an unencrypted backup would investigators still need to compel the subject to reveal a credential in order to gain access to all the data, or is having the file enough? If so, would this also include information that Apple specifically calls out as end-to-end encrypted, such as iMessages?
- clairity 6y agoyes, apple had plans to encrypt it all (edit: without having access), but the FBI objected: https://www.forbes.com/sites/kateoflahertyuk/2020/01/21/apple-halted-icloud-encryption-plans-after-fbi-warningreport/ https://www.forbes.com/sites/kateoflahertyuk/2020/01/21/appl...
- votepaunchy 6y agoNot everyone is willing to take Forbes speculation at face value: https://daringfireball.net/2020/01/reuters_report_on_apple_dropping_plan_for_encrypted_icloud_backups https://daringfireball.net/2020/01/reuters_report_on_apple_d...
- bilbo0s 6y ago>because it's not encrypted. Is that correct? You know what's so great about that!?!?! Senator Burr had a hand in forcing apple to not encrypt icloud backups! I'm sorry for my open Schadenfreude here, but I can't help feeling a little glee. I never realized how petty I am. But this is better than a tall, cold, delicious parfait on a hot summer day.
- lgleason 6y agoHow about Loefflers as well.
- nicwolff 6y agoShe isn't the chair of the Intelligence Committee who was about to release a fourth report affirming the findings of the Mueller report but can now be replaced by Mitch McConnell with a Trump loyalist.
- TAForObvReasons 6y ago100% this. Loeffler is team Trump. According to https://projects.fivethirtyeight.com/congress-trump-score/ https://projects.fivethirtyeight.com/congress-trump-score/ she is the only sitting senator that 100% voted in line with Trump's positions
- tsycho 6y agoShe (through her investment advisor) sold 0.6% of her portfolio. So the case against her is much weaker, if any at all. If you were insider trading on highly sensitive information, would you sell just 0.6%?
- azinman2 6y ago> “Four years after he co-wrote a bill meant to make companies like Apple provide confidential data about customers under investigation, Senate Intelligence Committee Chairman Senator Richard Burr (R-NC) has become the subject of an investigation.” Oh, the delicious irony!
- vulcan01 6y agoIs this the key? Will lawmakers start realising that anti-privacy laws will eventually be used against them? Will they start supporting privacy laws? One can only hope...
- _bxg1 6y agoProbably they'll start carving out bespoke protections for themselves
- TAForObvReasons 6y agoThis whole situation started from bespoke protections wherein Congress members weren't subject to insider trading rules.
- ViViDboarder 6y agoYes. Like with the Patriot act. They are attempting now to add additional oversight if used to investigate an elected official or candidate.
- hartator 6y agoFinally a FBI warrant for Apple data that we can get behind.
- alfiedotwtf 6y agoThat's the thin end of the wedge happening. Once you're ok with this, then they scope creep.
- hartator 6y agoYep, except when it's for some politics own privacy. No stronger motivation than that to pass privacy-conscious bills next time.
- dimator 6y agoWait what? I wish people would make up their minds on this. They have gotten a warrant. That's how law enforcement is supposed to work. Being against warrantless tapping is not the same thing.
- irfango 6y agoThere are a lot of mixed up discussions going on here. Some people are generally anti-law enforcement, some are against warrantless wiretapping, others are concerned about backdoors from a technical perspective. I'm with you though I'm not sure being against warrants is a sensible position.
- clairity 6y agomost folks are ok with warrants if used judiciously and sparingly when the evidence is compelling and the potential (societal) good overwhelmingly outweighs the (individual) harms. but we've been sliding down that slippery slope for decades now, and it's unclear that many (most?) warrants meet any sensible criteria, instead treading into paranoid, corrupt, and vindictive territories. like most things, it's not a black & white issue.
- 6y ago
- sneak 6y agoThis serves as an important reminder: Apple's terrible decisions about security and encryption in iCloud (for backups (which contain your messages) and photos and notes) means that Apple can always access your messages via iCloud backup, and thus can always decrypt them for the government (whether the government has probable cause and a warrant, like with a court order, or when they don't and are just fishing, like FISA/702's illegal spying). They use 702 often enough that there's the PRISM program that permits them direct download access to Apple's (and others') servers. https://www.reuters.com/article/us-apple-fbi-icloud-exclusive/exclusive-apple-dropped-plan-for-encrypting-backups-after-fbi-complained-sources-idUSKBN1ZK1CT https://www.reuters.com/article/us-apple-fbi-icloud-exclusiv... You should not be trusting iMessage or iCloud encryption to keep your data safe or private. Always use Signal! (And also tell your friends, associates, and relatives; Apple's marketing hype around privacy is a lot louder than these reminders can ever be.)
- nemothekid 6y agoAFAIK, Apple claims that iMessage is E2E encrypted. Meaning as long as you don’t use iCloud backups you are “safe”
- sneak 6y agoYes, but other important parts of iCloud are not, like all your Photos (which almost always includes EXIF GPS data, which can approximate a track log), Notes, Safari history and bookmarks, Contacts, Find My (locations for both devices and people), iCloud Drive files, reminders, voice memos, and wallet passes (which can include flight or ticket information, and loyalty cards, et c). If you don't have 2FA turned on (most people), your Health data (such as timestamped heart rate history) is available to Apple (and by extension the FBI/military/et c) as well. https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 If you're using iCloud (which happens automatically), they can see your nudes and read your private notes.
- ksec 6y agoThat is why I have been calling for iOS Time Capsule for years. I would much rather my back up stays at home. And I can have my offsite backup stored in B2 or something.
- jb775 6y agoIs this technically considered insider trading? It's not like he found out a specific company was about to be acquired or something. He's probably going to argue it was publicly available information.
- shbooms 6y ago...[Burr claimed] that he "relied solely on public news reports" when making a decision on the trades. quote of him from another article: https://www.newsweek.com/fbi-apple-warrant-richard-burr-icloud-stocks-1503931 https://www.newsweek.com/fbi-apple-warrant-richard-burr-iclo...
- crazygringo 6y agoThere's a specific law on insider trading that applies just to members of Congress. He may still argue that, but just pointing out that there may be legal differences. https://en.wikipedia.org/wiki/STOCK_Act https://en.wikipedia.org/wiki/STOCK_Act
- stevespang 6y agoHeh. The money he saved by selling early on insider information will now be spent on attorneys.