3 ms·

The part where it backs up all your messages without using a device specific key. The only things end to end encrypted are listed on this page: https://support

The part where it backs up all your messages without using a device specific key. The only things end to end encrypted are listed on this page: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 If you turn on iCloud syncing, basically you're falling back to simple "in transit" and "at rest" encryption. A lot of iPhone cracks involve just attacking your iCloud account, and then reading all of your messages from backups. This is not possible on Pixel which encrypt your device backups with on-device hardware encryption.

gumby 6y ago
> Pixel which encrypt your device backups with on-device hardware encryption. Can you set up a new android phone from an old phone’s backup? If so, how could this work? This is a standard way to set up a new iPhone: “restore” from a backup of your previous phone. Especially handy when your old phone is no longer available (lost/broken)
- glennpratt 6y ago
  Yes, decryption requires the original device's unlock PIN/pattern/password: https://security.googleblog.com/2018/10/google-and-android-have-your-back-by.html?m=1 https://security.googleblog.com/2018/10/google-and-android-h... Not that I fully understand how hard it is to circumvent.
  - gumby 6y ago
    Oh, I see. Apple has done that since the original iPhone too, and I believe iPod before it. I thought you meant they used a hardware key.
    - codemac 6y ago
      For your backups - but once you use iCloud to sync devices in real time, they just use their service keys, and your iCloud credentials are enough to read your iMessage history.
rnikander 6y ago
Okay, so if I understand correctly, the data in those Apple products is not secured, but turning on iCloud on a device does not ruin encryption for other apps that take it seriously. So if I have an app that uses Keychain (end-to-end encrypted) and encrypts it's data properly, it is still secure. Unless Apple is really bad and somehow collects my keys from keychain, or collects keys passed to CryptoKit, etc., straight out of RAM, and sends them to 3-letter agencies ... if I think that's happening, then I will look for new devices.
- codemac 6y ago
  I'm not sure I understand your keychain point. With iMessage you can message others with just your iCloud credentials if you turn it on, and you have access to full conversation history - without needing any particular device keys.

gumby 6y ago

> Pixel which encrypt your device backups with on-device hardware encryption. Can you set up a new android phone from an old phone’s backup? If so, how could this work? This is a standard way to set up a new iPhone: “restore” from a backup of your previous phone. Especially handy when your old phone is no longer available (lost/broken)

glennpratt 6y ago
Yes, decryption requires the original device's unlock PIN/pattern/password: https://security.googleblog.com/2018/10/google-and-android-have-your-back-by.html?m=1 https://security.googleblog.com/2018/10/google-and-android-h... Not that I fully understand how hard it is to circumvent.
- gumby 6y ago
  Oh, I see. Apple has done that since the original iPhone too, and I believe iPod before it. I thought you meant they used a hardware key.
  - codemac 6y ago
    For your backups - but once you use iCloud to sync devices in real time, they just use their service keys, and your iCloud credentials are enough to read your iMessage history.

rnikander 6y ago

Okay, so if I understand correctly, the data in those Apple products is not secured, but turning on iCloud on a device does not ruin encryption for other apps that take it seriously. So if I have an app that uses Keychain (end-to-end encrypted) and encrypts it's data properly, it is still secure. Unless Apple is really bad and somehow collects my keys from keychain, or collects keys passed to CryptoKit, etc., straight out of RAM, and sends them to 3-letter agencies ... if I think that's happening, then I will look for new devices.

codemac 6y ago
I'm not sure I understand your keychain point. With iMessage you can message others with just your iCloud credentials if you turn it on, and you have access to full conversation history - without needing any particular device keys.