3 ms·
No client side encryption yet. I can't see any reason to implement a scanner in this way other than at least having E2EE as a possibility under consideration.
by d110af5ccf 5y ago
No client side encryption yet.
I can't see any reason to implement a scanner in this way other than at least having E2EE as a possibility under consideration. They knew there was the possibility for PR backlash. Doing it on device also adds significant complexity. Meanwhile scanning on upload is a very common and well accepted (both legally and socially) practice.
On its own the current approach is all downsides and no upsides so there has to be something else going on here. Wanting to market iCloud as providing full E2EE is obvious and fits perfectly.
- brokenmachine 5y agoNitpick: What I think you're talking about is not E2E because there is no recipient (ie in this scenario Apple is not able to decrypt your data). It's just bog-standard encryption so your files are private or only shared with people you choose. We can only recognize the current situation, not a hypothetical future one. I for one think it is unlikely that Apple will willingly lock themselves out of that mountain of intoxicating user data. I believe their privacy stance is just marketing. There's countless examples of them not caring about real security issues, eg https://sneak.berlin/20201112/your-computer-isnt-yours/ https://sneak.berlin/20201112/your-computer-isnt-yours/ Even if they do ever implement true encryption - not E2E between customer and Apple - personally I wouldn't trust it because of the unauditable on-device scanning/snitching.