3 ms·
Seriously, you have to be so detached from reality to think iCloud Keychain sync is an issue at all, you just have to believe Apple put a backdoor their own TPM
by overstay8930 2y ago
Seriously, you have to be so detached from reality to think iCloud Keychain sync is an issue at all, you just have to believe Apple put a backdoor their own TPM chip so they could decrypt your Keychain with a software update without human interaction.
If you’re this distrustful of Apple, your logic should say to not use local Keychain at all. You either trust Apple’s hardware backed E2EE or you don’t trust anything from Apple at all, there’s no picking and choosing when it comes to this sort of thing.
I bet privacy researchers at Apple are facepalming reading these threads thinking people can run their own crypto better than they can.
- 8fingerlouie 2y agoI fully agree. > thinking people can run their own crypto better than they can Running or developing ? You can probably run something like Password Store [1] fairly secure, though you still have to trust the operating system not to leak your secrets, and it turns out that today, regardless of your choice, all major operating systems more or less synchronize your data to the cloud. I know Linux doesn't do it (Ubuntu tried some Amazon partnership once), but Linux is a poor match for many workplaces where Windows or MacOS are kings. Yes, you can run VSCode (or Vim/Emacs or whatever) on Linux, but running Photoshop, Fusion365 or various other business tools is not as "easy" as on Windows/MacOS, and in the end a company only has so many IT support staffers. [1]: https://www.passwordstore.org/ https://www.passwordstore.org/
- RedComet 2y agoPlenty of "privacy researchers" thought it was suspicious that they chose P-256 for iCloud keychain while using it nowhere else.