3 ms·
"Then I realized that Apple was tackling a real-world security issue by trying to make that issue simply go away for the average user." -- While there are a few
by windexh8er 13y ago
"Then I realized that Apple was tackling a real-world security issue by trying to make that issue simply go away for the average user." -- While there are a few features that are generally good for users (activation lock seemingly the best one) the way iCloud keychain is ridiculously a bad idea. Since there is no concept of segregation of the ownership of the data and everything is very easily tied back to the owner the implications of using this aren't worth it IMHO. Do you really want Apple in control of your hardware, software and now access to your online identity (by access I don't mean that they can directly read your account information, but I'm not saying that is out of the question based on what we know about how our government operates within partners such as Apple)?
Apple's (and Google's) limitless boundaries should be taking a majority by concern. Third party security tools are not a bad thing. Users should be interested in understanding and learning at a level that is parallel with the risks they are taking online. This is the part that is breaking down and Apple is "solving" this for those users by further locking them out-of third party software through feature bloat. I'm surprised at the complacency Rich avoids this topic, it truly feels like a paid for point of view post.
I own Apple hardware but I find myself using it less and less in my support of transparent 3rd party tools that help, not hinder, me to control my data. I'm glad the open laptop post sits above this one. To me that's an indicator the masses here are on the same page.
- _djo_ 13y agoThose of us with the technical understanding to be concerned about security should already be using third-party tools like 1Password, LastPass, etc. I doubt there'll be a massive out flux of those who use those tools to iCloud keychain. What iCloud keychain does bring is much better security for the other 99%, encouraging them not to re-use the same password across all their sites and to choose good passwords by default. When I see how difficult it has been to get other members of my family to adopt 3rd party password management systems I can only see that as a good thing.
- windexh8er 13y agoI would concede that you're right, however Apple doesn't provide a construct for the 99% to "do it right". Yes, there will always be those that blindly trust, however when you start talking about a master umbrella for an indivdual's complete, and utter, online presence including physical ties to money, property and other assets it shouldn't be taken lightly. If Apple had provided a "just works" method of showcasing how they cannot ever, without a doubt, decrypt the data while it sits on their servers, or offer up a way for the end user to easily leverage another service (for seperation of duties) they wouldn't receive the flack they do from those who inherently know the risks. I have had no problems getting family members to adopt 3rd party password tools. An hour showing them along with explaining the rationale and the light bulb switches on. A simple document showcasing how to generate new passwords and add new sites or services goes a long way for the few times they do that particular task. The root problem is that the 99% seems to be ignorant, not because they want to be, but because someone hasn't talked them through it. I find that pointing family to pages or videos is far less effective than me, personally, explaining things. Not sure why - but it's far more effective (maybe because they know I've actually taken time to show them vs just point them). I still view iCloud as a bad idea and wouldn't recommend it to anyone I know.