3 ms·
>Don't use non-e2ee services. >(Yes, there is an opt-in e2ee for iCloud now. No, nobody is using it because it is off by default and buried in settings.) Thes
by tw04 3y ago
>Don't use non-e2ee services.
>(Yes, there is an opt-in e2ee for iCloud now. No, nobody is using it because it is off by default and buried in settings.)
These are contradictory statements. It IS e2ee. I can easily convince friends and family to click through two menus to enable it. I can't easily convince my friends and family to go through the effort of installing syncthing on multiple devices and then go through with the configuration of them.
It's great you're a syncthing advocate, but telling people that icloud drive is bad just because they don't enable a setting that could cause an average user to lose all of their data if they lose the key is a little ridiculous. I GUARANTEE YOU that your grandmother would MUCH rather be able to call Apple to get her pictures of little johnny back when she forgets her password than have it "more secure by default".
- judge2020 3y agoAnd for many people, a paper that enables they recover their account feels (and likely is) much more assuring than the possibility of never getting in because you forgot things like when you created the account or any number of years-old purchases. The paper will live in a safe right next to other important documents like their Social Security Card or Passport.
- amelius 3y agoWhat good is e2ee if Apple employees can just VNC into your phone like another commenter said?
- photonerd 3y agoYou have to give them permission. No different to any RDP session
- tw04 3y ago>What good is e2ee if Apple employees can just VNC into your phone like another commenter said? That would be the same regardless of whether you were using icloud or syncthing... The commenter hasn't actually linked any sort of proof or citation (at the time I'm writing this), and assuming it exists at all, it requires you to accept the inbound connection in the first place. My guess is they're extremely confused about the new switch control function that allows remote access, not some nefarious Apple backdoor like you're insinuating. https://support.apple.com/en-us/HT205644 https://support.apple.com/en-us/HT205644
- amelius 3y ago> Requires you to accept the inbound connection in the first place It's all too simple to click "OK" in an inattentive moment.
- fh9302 3y agoIt's purely a video feed similar, it doesn't give the support employee direct access to the device. It's similar to screen sharing with FaceTime: https://support.apple.com/en-us/HT212734 https://support.apple.com/en-us/HT212734
- DavideNL 3y ago> “It IS e2ee.“ Well, not really…: ” Encryption of certain metadata and usage information: Some metadata and usage information stored in iCloud remains under standard data protection, even when Advanced Data Protection is enabled. For example, dates and times when a file or object was modified are used to sort your information, and checksums of file and photo data are used to help Apple de-duplicate and optimize your iCloud and device storage — all without having access to the files and photos themselves. Representative examples are provided in the table below. ……” https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 For example, file names in iCloud are not e2e, etc. etc.
- fh9302 3y agoAccording to your own link file names in iCloud Drive are E2EE.
- fh9302 3y agoIgnore my previous comment, the wording on the website was a bit ambiguous and I misinterpreted it.
- sneak 3y agoOh, so even when you think your files are private, Apple uploads content checksums unencrypted that allows Apple to know what files you have, and networks of other users that also have those same unique files. This is a huge privacy issue.