3 ms·

Nobody's reported seeing that sort of network traffic sent off of iOS devices. It's trivially easy to spot it, and it's well documented, going to Google and oth

Nobody's reported seeing that sort of network traffic sent off of iOS devices. It's trivially easy to spot it, and it's well documented, going to Google and others across the web, though.

mortehu 4y ago
On my iPhone, Safari browser history synchronization to iCloud was enabled by default.
- musicale 4y ago
  According to Apple, Safari history and bookmarks are end-to-end encrypted and Apple cannot read them: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 Is there any evidence that Apple is lying, and is actually decrypting them somehow and using them for advertising purposes, rather than for the "coherence" feature? I don't actually want browsing sessions to be unified across devices, so I do wish that it was turned off by default. (Though being able to close tabs remotely is a sort of interesting capability.) However, it doesn't seem to be actual spyware used for advertising or tracking purposes.
  - pyuser583 4y ago
    That’s not what your link says. The link says browsing history is end-to-end encrypted, but Bookmarks are not.
acomjean 4y ago
Safari on iOS is auto-completing stuff as you type. The option to search with google comes up if you get far enough. And it’s not going to google first. If you type an address the “link” at the top is to Apple Maps. They seem to do a similar thing with place names. I’m not sure but one can be fairly certain they’re using the phones location to help….
heavyset_go 4y ago
You will have no idea what is being carried via encrypted channels to Apple's opaque backend servers.
manigandham 4y ago
> " It's trivially easy to spot" Is it? How exactly are encrypted payloads to a secure, opaque and generic endpoint easy to distinguish?
- majormajor 4y ago
  It's trivially easy to spot it going to Google/FB/whoever if you visit a page with a GA or FB or whatever pixel. That's part of the second sentence, not the first. For spotting it going to Apple you'd have to do more fancy correlation over time and such, but you can find people out there who are researching this stuff... so that's who I'm waiting for to hear more from.

Nobody's reported seeing that sort of network traffic sent off of iOS devices. It's trivially easy to spot it, and it's well documented, going to Google and others across the web, though.

mortehu 4y ago

On my iPhone, Safari browser history synchronization to iCloud was enabled by default.

musicale 4y ago
According to Apple, Safari history and bookmarks are end-to-end encrypted and Apple cannot read them: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 Is there any evidence that Apple is lying, and is actually decrypting them somehow and using them for advertising purposes, rather than for the "coherence" feature? I don't actually want browsing sessions to be unified across devices, so I do wish that it was turned off by default. (Though being able to close tabs remotely is a sort of interesting capability.) However, it doesn't seem to be actual spyware used for advertising or tracking purposes.
- pyuser583 4y ago
  That’s not what your link says. The link says browsing history is end-to-end encrypted, but Bookmarks are not.

acomjean 4y ago

Safari on iOS is auto-completing stuff as you type. The option to search with google comes up if you get far enough. And it’s not going to google first. If you type an address the “link” at the top is to Apple Maps. They seem to do a similar thing with place names. I’m not sure but one can be fairly certain they’re using the phones location to help….

heavyset_go 4y ago

You will have no idea what is being carried via encrypted channels to Apple's opaque backend servers.

manigandham 4y ago

> " It's trivially easy to spot" Is it? How exactly are encrypted payloads to a secure, opaque and generic endpoint easy to distinguish?

majormajor 4y ago
It's trivially easy to spot it going to Google/FB/whoever if you visit a page with a GA or FB or whatever pixel. That's part of the second sentence, not the first. For spotting it going to Apple you'd have to do more fancy correlation over time and such, but you can find people out there who are researching this stuff... so that's who I'm waiting for to hear more from.