3 ms·

"For example, conversations which take place over iMessage and FaceTime are protected by end-to-end encryption so no one but the sender and receiver can see or

by chm 13y ago

"For example, conversations which take place over iMessage and FaceTime are protected by end-to-end encryption so no one but the sender and receiver can see or read them. Apple cannot decrypt that data. Similarly, we do not store data related to customers’ location, Map searches or Siri requests in any identifiable form." If all of this statement is true, then I'm impressed. I would have thought Apple to keep more information, such as iMessage logs, for the sake of analytics and Ad revenue. Good.

foolrush 13y ago
“Apple iMessage users should be aware that regardless of what they heard last week, their messages can be easily obtained by law enforcement pursuant to a warrant under the Electronic Communication Act [ECPA],” http://www.globalresearch.ca/cell-phone-surveillance-us-law-enforcement-can-intercept-apple-imessages/5331824 http://www.globalresearch.ca/cell-phone-surveillance-us-law-... So which one is correct, or does the language permit both to be?
LoganCale 13y ago
Apple has never made the iMessage protocol publicly available for review, but from reverse engineering people have not been able to find evidence of end-to-end encryption, just SSL/TLS to and from Apple's servers. > I do not see anything about retrieving public keys of users you are sending messages to; hence your message is completely readable/editable by someone at apple's servers. http://security.stackexchange.com/questions/18908/the-inner-workings-of-imessage-security http://security.stackexchange.com/questions/18908/the-inner-... Further, an iMessage message can be received simultaneously on all your devices. Unless your private key is synced via Apple's servers, how would end to end decryption work? And finally, there were incidents some time back where people were receiving messages intended for other people, but were able to read them unencrypted. It would be nice to get some clarification from Apple on this, along with making the protocol and its security public.
- eigenvector 13y ago
  If Apple is using the Obama administration's definition of "can't", then "Apple cannot decrypt that data" simply means, "Apple does not decrypt that data".
llamataboot 13y ago
or at least search words. I'm surprised Apple hasn't made a bigger deal of it than one sentence at the end of an unsigned statement

by chm 13y ago

foolrush 13y ago

“Apple iMessage users should be aware that regardless of what they heard last week, their messages can be easily obtained by law enforcement pursuant to a warrant under the Electronic Communication Act [ECPA],” http://www.globalresearch.ca/cell-phone-surveillance-us-law-enforcement-can-intercept-apple-imessages/5331824 http://www.globalresearch.ca/cell-phone-surveillance-us-law-... So which one is correct, or does the language permit both to be?

LoganCale 13y ago

Apple has never made the iMessage protocol publicly available for review, but from reverse engineering people have not been able to find evidence of end-to-end encryption, just SSL/TLS to and from Apple's servers. > I do not see anything about retrieving public keys of users you are sending messages to; hence your message is completely readable/editable by someone at apple's servers. http://security.stackexchange.com/questions/18908/the-inner-workings-of-imessage-security http://security.stackexchange.com/questions/18908/the-inner-... Further, an iMessage message can be received simultaneously on all your devices. Unless your private key is synced via Apple's servers, how would end to end decryption work? And finally, there were incidents some time back where people were receiving messages intended for other people, but were able to read them unencrypted. It would be nice to get some clarification from Apple on this, along with making the protocol and its security public.

eigenvector 13y ago
If Apple is using the Obama administration's definition of "can't", then "Apple cannot decrypt that data" simply means, "Apple does not decrypt that data".

llamataboot 13y ago

or at least search words. I'm surprised Apple hasn't made a bigger deal of it than one sentence at the end of an unsigned statement