3 ms·

Haha, same thing as last time. "Give me links as proof" [Downvote them and not reply] It's okay. Other HN readers know what's up.

lern_too_spel 12y ago
I didn't downvote them. You can verify that I don't have enough karma to do that. If I had to guess why you've been downvoted, I'd guess it was because you keep posting links that don't support your claim, wasting everyone's time. Also, this is much different from last time. Last time, you didn't bother to post any links at all, even links irrelevant to your claim.
- xnull2guest 12y ago
  How is an article titled "Apple can decrypt iPhones for cops; Google can remotely "reset password" for Android devices" a waste of people's time? What sort of proof do you want exactly? Are you looking for a PR statement from Apple that says "we regularly decrypt your data and have backdoors build in and escrow worked out so that we can comply with law enforcement?" You aren't going to get a nice first party source, although Apple has essentially admitted to it. Apple says that "For all devices running iOS 8.0 and later versions, Apple will no longer be performing iOS data extractions as the data sought will be encrypted and Apple will not possess the encryption key." You're going to interpret that as "oh hah, well some of the data wasn't encrypted before". But I included links earlier showing how Apple's (and Google's) announcement centered around the use of new technology that would not allow Apple to have a copy of the key. And if you look at the data they were pulling off, there was data that was 'encrypted' before but had engineered circumvention - 'active data' being one. Apple will (currently) decrypt data it has in iCloud for a device. It is engineered to be very difficult to not store data in iCloud [1]. Apple's own list of information that may be in iCloud include "stored photos, documents, contacts, calendars, bookmarks and iOS device backups. iOS device backups may include photos and videos in the users’ camera roll, device settings, app data, iMessage, SMS, and MMS messages and voicemail." https://news.ycombinator.com/item?id=8522316 https://news.ycombinator.com/item?id=8522316 for more. Re: last time. I pointed to other areas of the thread, where plenty of sources were given. [1] http://mjtsai.com/blog/2014/10/26/yosemite-uploads-unsaved-documents-and-recent-addresses-to-icloud/ http://mjtsai.com/blog/2014/10/26/yosemite-uploads-unsaved-d...
  - lern_too_spel 12y ago
    The second part of your post shows you're starting to understand that Apple doesn't do key escrow and can't decrypt data encrypted with the passcode today or ever before. You go off tilting at windmills to show that they can get data stored in iCloud. That was never in doubt. This whole thread has been about whether they have the keys to decrypt encrypted data on the device. They don't.
    - xnull 12y ago
      > Apple ... can't decrypt data encrypted with the passcode ... today or ever before. The passcode of 12 bits... Apple can and will provide ciphertexts, will hand over copies of the large amounts of data customers are encouraged and sometimes forced to upload. > This whole thread has been about whether they have the keys to decrypt encrypted data on the device. They don't. From the top of the post: "CALEA, the Stored Communications Act and Section 215 of the Patriot Act all compel corporations (via the Department of Commerce) to build DATA AND key escrow services into their products." What you're saying is that they don't provide key escrow specifically (while wholly ignoring data escrow). What I'm saying is that by design the crypto doesn't matter in practice and the system had been (still is) architected to allow for data intercept. When you argue the 'no key escrow!' case you are implicitly condoning 'they won't hand over your data!'. Not true. It was the case and _still is_ the case that Apple and its manufacturers will give access to your private communications, metadata and data. We've focused on Apple but Google is not different.
      - lern_too_spel 12y ago
        Look up what "condoning" means. It does not mean what you think it means. > The passcode of 12 bits... Even the weakest passcode option is more than 13 bits, but neither Apple nor Google restricts you to such short passcodes. > [CALEA nonsense] How many times do people have to tell you that CALEA doesn't apply in this case? Don't you find it suspicious that Apple and Google are essentially claiming to be flouting your imaginary version of CALEA, and nobody has called them on it except you? > Google is no different. Exactly. They don't provide the government with decryption keys either. It's been fun, but you'll have to argue about imaginary laws, black helicopters, chemtrails, and ice bullets with your fellow conspiracy theorists. If you won't trust primary sources and common sense, there's nothing more I can do.

lern_too_spel 12y ago

I didn't downvote them. You can verify that I don't have enough karma to do that. If I had to guess why you've been downvoted, I'd guess it was because you keep posting links that don't support your claim, wasting everyone's time. Also, this is much different from last time. Last time, you didn't bother to post any links at all, even links irrelevant to your claim.

xnull2guest 12y ago
How is an article titled "Apple can decrypt iPhones for cops; Google can remotely "reset password" for Android devices" a waste of people's time? What sort of proof do you want exactly? Are you looking for a PR statement from Apple that says "we regularly decrypt your data and have backdoors build in and escrow worked out so that we can comply with law enforcement?" You aren't going to get a nice first party source, although Apple has essentially admitted to it. Apple says that "For all devices running iOS 8.0 and later versions, Apple will no longer be performing iOS data extractions as the data sought will be encrypted and Apple will not possess the encryption key." You're going to interpret that as "oh hah, well some of the data wasn't encrypted before". But I included links earlier showing how Apple's (and Google's) announcement centered around the use of new technology that would not allow Apple to have a copy of the key. And if you look at the data they were pulling off, there was data that was 'encrypted' before but had engineered circumvention - 'active data' being one. Apple will (currently) decrypt data it has in iCloud for a device. It is engineered to be very difficult to not store data in iCloud [1]. Apple's own list of information that may be in iCloud include "stored photos, documents, contacts, calendars, bookmarks and iOS device backups. iOS device backups may include photos and videos in the users’ camera roll, device settings, app data, iMessage, SMS, and MMS messages and voicemail." https://news.ycombinator.com/item?id=8522316 https://news.ycombinator.com/item?id=8522316 for more. Re: last time. I pointed to other areas of the thread, where plenty of sources were given. [1] http://mjtsai.com/blog/2014/10/26/yosemite-uploads-unsaved-documents-and-recent-addresses-to-icloud/ http://mjtsai.com/blog/2014/10/26/yosemite-uploads-unsaved-d...
- lern_too_spel 12y ago
  The second part of your post shows you're starting to understand that Apple doesn't do key escrow and can't decrypt data encrypted with the passcode today or ever before. You go off tilting at windmills to show that they can get data stored in iCloud. That was never in doubt. This whole thread has been about whether they have the keys to decrypt encrypted data on the device. They don't.
  - xnull 12y ago
    > Apple ... can't decrypt data encrypted with the passcode ... today or ever before. The passcode of 12 bits... Apple can and will provide ciphertexts, will hand over copies of the large amounts of data customers are encouraged and sometimes forced to upload. > This whole thread has been about whether they have the keys to decrypt encrypted data on the device. They don't. From the top of the post: "CALEA, the Stored Communications Act and Section 215 of the Patriot Act all compel corporations (via the Department of Commerce) to build DATA AND key escrow services into their products." What you're saying is that they don't provide key escrow specifically (while wholly ignoring data escrow). What I'm saying is that by design the crypto doesn't matter in practice and the system had been (still is) architected to allow for data intercept. When you argue the 'no key escrow!' case you are implicitly condoning 'they won't hand over your data!'. Not true. It was the case and _still is_ the case that Apple and its manufacturers will give access to your private communications, metadata and data. We've focused on Apple but Google is not different.
    - lern_too_spel 12y ago
      Look up what "condoning" means. It does not mean what you think it means. > The passcode of 12 bits... Even the weakest passcode option is more than 13 bits, but neither Apple nor Google restricts you to such short passcodes. > [CALEA nonsense] How many times do people have to tell you that CALEA doesn't apply in this case? Don't you find it suspicious that Apple and Google are essentially claiming to be flouting your imaginary version of CALEA, and nobody has called them on it except you? > Google is no different. Exactly. They don't provide the government with decryption keys either. It's been fun, but you'll have to argue about imaginary laws, black helicopters, chemtrails, and ice bullets with your fellow conspiracy theorists. If you won't trust primary sources and common sense, there's nothing more I can do.