4 ms·
It's a shame iCloud backups aren't encrypted, but the only information that seems newsworthy is the fact that it takes so little to reset an AppleID password. A
by mannkind 13y ago
It's a shame iCloud backups aren't encrypted, but the only information that seems newsworthy is the fact that it takes so little to reset an AppleID password. Although I suppose if the intruder knows the AppleID and last-four of my CC, then they probably know my name and birthday as well. :/
The rest of it though... iMessage is not perfect, but it's better than most alternatives.
* Plaintext logs of iMessages (iOS or OS X) allow you to view past messages. Duh. So do plaintext logs of OTR chats via Adium or Pidgin.
* You don't generate your own key nor verify the keys of others; you rely on a third party to do it. The effect is that the system is actually used by normals unlike, sadly, GPG or OTR. Heck, even many of the technical people I know give up on GPG and OTR because they're just too much work. The point is the messages are encrypted in transit and cannot be read by just anyone ... in contrast to SMS and typical instant messaging.
- brigade 13y agoOnly a very few niche services encrypt user data such that the service provider cannot read it, because then users lose everything just because they forget their password. And said services are explicit about this upfront.
- parasubvert 13y agoiCloud backups are encrypted. Not all iOS files are encrypted with a device-UID-wrapped key, however. See the iOS Security Whitepaper: https://www.apple.com/ipad/business/docs/iOS_Security_Oct12.pdf https://www.apple.com/ipad/business/docs/iOS_Security_Oct12.... In short, Apple can't read your email backups, and neither can anyone attempting to restore your device from iCloud (they would need your email passwords). iMessage doesn't have the same protection.
- mannkind 13y agoThank you for the clarification!