6 ms·
Wow, Apple enabling E2EE for backup is huge, since before they would bypass iMessage security by including your iMessage keys in the unencrypted cloud backup (s
by newZWhoDis 4y ago
Wow, Apple enabling E2EE for backup is huge, since before they would bypass iMessage security by including your iMessage keys in the unencrypted cloud backup (so governments could request that copy then watch your messages in real time).
I’m sure they’ll get pushback for closing this loophole
- anxiously 4y agoCouldn’t they simply use an encryption algorithm that has two private keys and they control one?
- CGamesPlay 4y agoYes, but this would be apparent in the code, since the sender would have to encrypt against both public keys.
- deleted 4y ago[deleted]
- godelski 4y agoDo we know if they still continued with the data scanning? I'm all for E2EE backups, but not if it comes at the cost of scanning my data.
- stalfosknight 4y agoApple is abandoning its CSAM scanning plan: https://www.wired.com/story/apple-photo-scanning-csam-communication-safety-messages/ https://www.wired.com/story/apple-photo-scanning-csam-commun...
- theshrike79 4y agoThey planned to scan only the files that would end up in the cloud anyway. iCloud off -> no local CSAM scan. Local CSAM scan with multiple failsafes (+ actual person checking) + E2EE iCloud -> zero need to allow law enforcement access to iCloud servers. This would also mean that Apple cloud've encrypted them in such a way that even they can't access them.
- fnordpiglet 4y agoYeah I’m thinking about how many millions of HN comments are now invalid. I’m sure there’s some other gripe in its place. That’s what we engineers do.
- deleted 4y ago[deleted]
- 542458 4y agoI’m not quite sure what you’re getting at. It’s not a sin to comment on a security issue while the issue still exists. Furthermore, correcting a security issue doesn’t render somebody immune to all complaints on future security issues.