2 ms·
I find this acceptable. My threat model includes pickpockets and nosy siblings. It doesn't include nation states and highly sophisticated attacks. If the gov
by TameAntelope 5y ago
I find this acceptable. My threat model includes pickpockets and nosy siblings. It doesn't include nation states and highly sophisticated attacks.
If the government wants to look at my data, and has gone through the proper channels to do so, I believe that, generally, that system will protect me from a consequential privacy intrusion. It's not a perfect system, but I believe the benefits of the power of subpoena are worth the costs, so I'm happy to participate in it.
- pkulak 5y ago> It doesn't include nation states and highly sophisticated attacks. Do you really believe that only nation states can get into Apple's machines? I'd agree that Apple is pretty far up there in security reputation, but if there was a headline tomorrow of "iMessage Backups of 2 Million Users For Sale On Tor" would it really surprise you? I don't even trust _myself_. I self-host my family's Matrix server, and we still encrypt all our conversations.
- TameAntelope 5y agoWould it surprise me? Yes, it would surprise me substantially and force me to revise my beliefs around the security of my data at Apple. Hacking isn't a magic wand, where bad guys cast spells and good guys just look foolish. I've worked in cybersecurity for ~10 years, and I know generally what the reputations are of various large tech companies. Apple has a good reputation for protecting properly secured data. It is currently, based on the information we have available to us, paranoid to think your data isn't secure from hackers when it's stored properly in Apple's infrastructure. Your behavior is, by a gigantic margin, more likely to cause a compromise of your secure data than Apple is to cause a compromise of your secure data.