3 ms·

Imagine the privacy violations of refurbished iPhones. You buy an iPhone or get a trade in that’s a refurb and you suddenly have randoms “nudes” appearing in yo

by Viraxi 2y ago

Imagine the privacy violations of refurbished iPhones. You buy an iPhone or get a trade in that’s a refurb and you suddenly have randoms “nudes” appearing in your recents? This can’t be right….

brianwawok 2y ago
Pretty sure its encrypted with your private key. There would be no way for someone else to ever see your data, unless I am totally misunderstanding how Apple does this.
alamortsubite 2y ago
Refurbs are presumably factory-reset before resale, which in turn presumably includes zeroing out user storage. Presumably. The issue in TFA is probably different. If files are only marked for deletion and their data never overwritten, it's conceivable they might show up again after a buggy update. Of course, one would assume iOS would actually delete the data of files marked for deletion after some expiry, but it's also possible this wasn't happening.
- manquer 2y ago
  Beyond deleting the reference to file , Delete the data on disk means one of two things : Overwrite with zeros or have another file contents written over it . Overwrite with zeros is generally not done as default in flash memories to improve disk life, flash memories have a limited number of times they can be written too, so most memory controllers will try to distribute writes This seems less a OS bug, more likely iOS/iCloud had a bug on marking deletion correctly
  - jasomill 2y ago
    "Overwrite" on flash requires erasing the block containing the data you wish to overwrite, so pre-erasing blocks that will never be used again until rewritten doesn't reduce available write cycles, and can improve both endurance and performance. Two potential issues when relying on flash erasure for privacy, neither of which apply to a full device wipe: 1. Filesystem allocation units are almost always smaller than flash erase blocks; erasing and rewriting, e.g., a 1MB flash block whenever a single 4 kB allocation unit it contains is freed will lead to performance and endurance problems. 2. On desktop and laptop systems, erase (ATA TRIM/SCSI UNMAP/NVMe Deallocate) operations are typically deferred to a low-priority or periodic background task for performance reasons; the same may apply to iOS devices. In the case of full device wipes on modern Apple devices (iOS and Apple Silicon Mac), this is mostly moot anyway from a privacy perspective, because encrypted storage makes data effectively unreadable as soon as encryption keys are wiped.
tr3ntg 2y ago
I don't think this is an issue. It seems to be an iCloud-related bug based on just how long the reports claimed photos had been deleted. If you're signed out of iCloud, I'd expect the photo to not resurface. Either way, horrible day for Apple's "Privacy First" charade.

by Viraxi 2y ago

brianwawok 2y ago

Pretty sure its encrypted with your private key. There would be no way for someone else to ever see your data, unless I am totally misunderstanding how Apple does this.

alamortsubite 2y ago

Refurbs are presumably factory-reset before resale, which in turn presumably includes zeroing out user storage. Presumably. The issue in TFA is probably different. If files are only marked for deletion and their data never overwritten, it's conceivable they might show up again after a buggy update. Of course, one would assume iOS would actually delete the data of files marked for deletion after some expiry, but it's also possible this wasn't happening.

manquer 2y ago
Beyond deleting the reference to file , Delete the data on disk means one of two things : Overwrite with zeros or have another file contents written over it . Overwrite with zeros is generally not done as default in flash memories to improve disk life, flash memories have a limited number of times they can be written too, so most memory controllers will try to distribute writes This seems less a OS bug, more likely iOS/iCloud had a bug on marking deletion correctly
- jasomill 2y ago
  "Overwrite" on flash requires erasing the block containing the data you wish to overwrite, so pre-erasing blocks that will never be used again until rewritten doesn't reduce available write cycles, and can improve both endurance and performance. Two potential issues when relying on flash erasure for privacy, neither of which apply to a full device wipe: 1. Filesystem allocation units are almost always smaller than flash erase blocks; erasing and rewriting, e.g., a 1MB flash block whenever a single 4 kB allocation unit it contains is freed will lead to performance and endurance problems. 2. On desktop and laptop systems, erase (ATA TRIM/SCSI UNMAP/NVMe Deallocate) operations are typically deferred to a low-priority or periodic background task for performance reasons; the same may apply to iOS devices. In the case of full device wipes on modern Apple devices (iOS and Apple Silicon Mac), this is mostly moot anyway from a privacy perspective, because encrypted storage makes data effectively unreadable as soon as encryption keys are wiped.

tr3ntg 2y ago

I don't think this is an issue. It seems to be an iCloud-related bug based on just how long the reports claimed photos had been deleted. If you're signed out of iCloud, I'd expect the photo to not resurface. Either way, horrible day for Apple's "Privacy First" charade.