4 ms·

> 1. Photos (and other documents) are currently uploaded to iCloud un-encrypted Incorrect. Photos and documents are encrypted both in transit and at rest. They

> 1. Photos (and other documents) are currently uploaded to iCloud un-encrypted Incorrect. Photos and documents are encrypted both in transit and at rest. They are not E2EE, however - i.e. Apple has decryption keys. > 2. These photos are already scanned for CSAM after upload Apple does no scanning in iCloud. All of your data (except email) is stored encrypted and it cannot be scanned. Apple escrows the decryption keys, which are provided only to comply with legal requests for user data. > 3. Because the photos are not encrypted, at any point, any government can file a court order to release those photos. The second part is true, but the first is not. > 4. The court order can require Apply to not notify the user, or the public in general. This is simply the law. If there is no non-disclosure order, it's Apple's policy to notify. iCloud encryption docs: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 Legal process docs: https://www.apple.com/legal/privacy/law-enforcement-guidelines-us.pdf https://www.apple.com/legal/privacy/law-enforcement-guidelin...

phire 5y ago
Encryption during transit and rest really don't count as encryption, at least not in this context. Apple can decrypt them time to do things like scan them for CSAM. I assumed I wouldn't need to state the obvious. And yes, Apple have been scanning uploaded photos since about 2019. At least, that's when they modified their terms and conditions to allow it. https://www.macobserver.com/analysis/apple-scans-uploaded-content/ https://www.macobserver.com/analysis/apple-scans-uploaded-co...
- willseth 5y ago
  The author of that article was way off. First, his evidence is that an email attachment triggered a report, and we already know email is the only data stored unencrypted in iCloud. Email scanning is the most plausible explanation for the ToS update he is reading like chicken entrails. If Apple were scanning iCloud Photos, one would expect there to be hundreds of thousands if not millions of reports to NCMEC (last year Facebook reported 20 million). Reporting is compulsory, the information is public, and Apple reported 265 last year. Do the math. Apple is not scanning Photos.

phire 5y ago

Encryption during transit and rest really don't count as encryption, at least not in this context. Apple can decrypt them time to do things like scan them for CSAM. I assumed I wouldn't need to state the obvious. And yes, Apple have been scanning uploaded photos since about 2019. At least, that's when they modified their terms and conditions to allow it. https://www.macobserver.com/analysis/apple-scans-uploaded-content/ https://www.macobserver.com/analysis/apple-scans-uploaded-co...

willseth 5y ago
The author of that article was way off. First, his evidence is that an email attachment triggered a report, and we already know email is the only data stored unencrypted in iCloud. Email scanning is the most plausible explanation for the ToS update he is reading like chicken entrails. If Apple were scanning iCloud Photos, one would expect there to be hundreds of thousands if not millions of reports to NCMEC (last year Facebook reported 20 million). Reporting is compulsory, the information is public, and Apple reported 265 last year. Do the math. Apple is not scanning Photos.