3 ms·
Fwiw, that's a clear statement - but only that. There is no way for us, the users, to know wherever they have the capability to add additional keys to decrypt
by ffsm8 5mo ago
Fwiw, that's a clear statement - but only that.
There is no way for us, the users, to know wherever they have the capability to add additional keys to decrypt the data because the platform isn't open source and doesn't have attestation wrt what's actually serving the requests.
And it's worth remembering that apple had similar articles published before prism too which were ultimately proven to be groundless by prism.
- otterley 5mo agoWhat, exactly, was proven to be groundless?
- dcrazy 5mo agoThe whole thing relies on hardware security modules, so even if you can prove that the whole software stack is working as described, there is literally no way to know that the SE isn’t secretly handing the OS keys that a third party can decrypt. There needs to be trust at some level, and trust in Apple the entity to not be outright lying about its thoroughly documented security posture is a reasonable level of trust for most people on the planet, including those who are at very real risk of targeted attack by state-level actors.