5 ms·

Interesting, Apples privacy policy says that they can scan data you upload for illegal content and report it, news articles from when this blew up in the news s

by gpm 4y ago

Interesting, Apples privacy policy says that they can scan data you upload for illegal content and report it, news articles from when this blew up in the news said that Apple did for services like iMail (that upload in an unencrypted form). I can't speak towards what they actually currently do. My understanding of iCloud photos is that they're encrypted, as in Apple can't scan them on the server, but I'd imagine across they're cloud services they ought to be seeing more unencrypted content than that. I also don't care nearly as much about their servers scanning content that they are in possession of, as my device scanning content that I am in possession of... so I probably should have stayed out of this part of the argument a bit better. Oh well. https://www.apple.com/legal/privacy/en-ww/ https://www.apple.com/legal/privacy/en-ww/ (See Apple's Use of Personal Data) https://9to5mac.com/2021/08/23/apple-scans-icloud-mail-for-csam/ https://9to5mac.com/2021/08/23/apple-scans-icloud-mail-for-c...

ec109685 4y ago
With a court order, Apple will hand over the contents of an iCloud drive without any encryption to law enforcement. So they could do Google style preemptive scanning of everything uploaded. Adding an encrypted hash to every photo instead seems way better than having access to every photo on iCloud without any encryption.
plonk 4y ago
> My understanding of iCloud photos is that they're encrypted, as in Apple can't scan them on the server iCloud Photos currently aren't encrypted this way, just "in transit and on server" [1]. > iCloud secures your information by encrypting it when it’s in transit, storing it in an encrypted format, and securing your encryption keys in Apple data centers. Both Apple and third-party data centers may be used to store and process your data. This contrasts with services marked "end-to-end" where Apple doesn't have the key. [1] https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303

by gpm 4y ago

ec109685 4y ago

With a court order, Apple will hand over the contents of an iCloud drive without any encryption to law enforcement. So they could do Google style preemptive scanning of everything uploaded. Adding an encrypted hash to every photo instead seems way better than having access to every photo on iCloud without any encryption.

plonk 4y ago

> My understanding of iCloud photos is that they're encrypted, as in Apple can't scan them on the server iCloud Photos currently aren't encrypted this way, just "in transit and on server" [1]. > iCloud secures your information by encrypting it when it’s in transit, storing it in an encrypted format, and securing your encryption keys in Apple data centers. Both Apple and third-party data centers may be used to store and process your data. This contrasts with services marked "end-to-end" where Apple doesn't have the key. [1] https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303