3 ms·

iCloud data is "encrypted" but Apple has the keys and can decrypt it. Apple has been wishy-washy and has actually backed away from announced plans to implement

iCloud data is "encrypted" but Apple has the keys and can decrypt it. Apple has been wishy-washy and has actually backed away from announced plans to implement E2E encryption for iCloud with the DOJ whining about wanting backdoors every couple of years. Burr's previous support of encryption bans is ironic here; maybe now he wishes he hadn't made it politically impossible for Apple to protect his own data: https://www.wired.com/2016/04/senates-draft-encryption-bill-privacy-nightmare/ https://www.wired.com/2016/04/senates-draft-encryption-bill-...

azinman2 6y ago
I don’t think this is accurate at all. Edit: You can find details here: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303
- henriquez 6y ago
  Here's the breakdown of iCloud's security: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 Some features are E2E encrypted, but iCloud file storage is not.
- jdillaaa 6y ago
  That's pretty accurate. Some stuff is encrypted with the device passcode like Health data and Keychain data. Around iOS 9 [1], Apple implemented some functionality to encrypt backups through a similar mechanism. This never panned out. 1) https://wccftech.com/ios-93-prompt-passcode-restoring-encrypted-icloud-backup/ https://wccftech.com/ios-93-prompt-passcode-restoring-encryp... Edit: as others have pointed out, looks like this never happened because the FBI said no.
  - SanchoPanda 6y ago
    An alternate explanation is that this never occurred because if people lose their passwords they would be completely out of luck.
- saagarjha 6y ago
  The link you posted supports the point you're claiming is not accurate. Only a few categories of iCloud data are end-to-end encrypted so that Apple cannot access them.
adwi 6y ago
With an unencrypted backup would investigators still need to compel the subject to reveal a credential in order to gain access to all the data, or is having the file enough? If so, would this also include information that Apple specifically calls out as end-to-end encrypted, such as iMessages?

azinman2 6y ago

I don’t think this is accurate at all. Edit: You can find details here: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303

henriquez 6y ago
Here's the breakdown of iCloud's security: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 Some features are E2E encrypted, but iCloud file storage is not.
jdillaaa 6y ago
That's pretty accurate. Some stuff is encrypted with the device passcode like Health data and Keychain data. Around iOS 9 [1], Apple implemented some functionality to encrypt backups through a similar mechanism. This never panned out. 1) https://wccftech.com/ios-93-prompt-passcode-restoring-encrypted-icloud-backup/ https://wccftech.com/ios-93-prompt-passcode-restoring-encryp... Edit: as others have pointed out, looks like this never happened because the FBI said no.
- SanchoPanda 6y ago
  An alternate explanation is that this never occurred because if people lose their passwords they would be completely out of luck.
saagarjha 6y ago
The link you posted supports the point you're claiming is not accurate. Only a few categories of iCloud data are end-to-end encrypted so that Apple cannot access them.

adwi 6y ago

With an unencrypted backup would investigators still need to compel the subject to reveal a credential in order to gain access to all the data, or is having the file enough? If so, would this also include information that Apple specifically calls out as end-to-end encrypted, such as iMessages?