abalone

218 ms·

961.
by abalone 9y ago
> A Court in Germany ordered that access to certain items in the Project Gutenberg collection are blocked from Germany... until the issue is resolved during appeal, [Project Gutenberg] will comply. This is really misleading. It implies
962.
by abalone 9y ago
Agree services like this defeated music piracy. However since we're talking about the IPO, Spotify faces major competition from Apple Music. Unlike Spotify, Apple does not need to turn a profit on the service. (They've even implem
963.
by abalone 9y ago
See earlier comment re: Apple as the adversary.
964.
by abalone 9y ago
"We have a feature called iCloud Keychain Backup, and here's what we do. We have a new credential, the iCloud Security Code, and most often this is the device passcode." - Apple security architect, in the aforelinked video, w
965.
by abalone 9y ago
You didn’t watch the video did you. That’s not how it works. The key is your device passcode.
966.
by abalone 9y ago
Nobody said they were clear of anything, just more secure than your average China-based service. (I have the top comment on that thread btw.) I should also add that locked notes in iOS are end-to-end encrypted. Those are pretty easy to use
967.
by abalone 9y ago
> At best you can say that Chinese users will likely be no worse off using iCloud You can say better than that. iCloud is more secure than your average service (especially in China). It end to end encrypts the most sensitive data (keyc
968.
by abalone 9y ago
To be clear, keychain is end to end encrypted including the Cloud Key Vault that backs it up to potentially adversarial clouds. Not true for other iCloud data but your passwords are probably safe.
969.
by abalone 9y ago
Just keychain backups. However they could extend that mechanism to other data. I’m excited to see what they do with iMessage-on-iCloud which is very close to release.
970.
by abalone 9y ago
Passwords are backed up but they are end to end encrypted. Check out Cloud Key Vault, it’s a pretty cool solution for keychain (password) backups designed for adversarial clouds. Unfortunately does not apply to regular iCloud backups or mos
971.
by abalone 9y ago
You don't, and it would arguably violate their privacy if you did. But they do.
972.
by abalone 9y ago
> iMessage's "end-to-end encryption" (which isn't that safe against sophisticated hackers or oppressive authorities to begin with) Could you support this claim please? Re: iCloud backups you're correct. So far.
973.
by abalone 9y ago
To Apple's credit there are still significant parts of their platform that remain end-to-end encrypted even in China -- meaning that Apple or any other cloud operator can't read because they don't have the keys, notably:[1] -
974.
by abalone 9y ago
Nobody is assuming that. The whole point is it can store secrets on adversarial clouds. The key stays with the client.
975.
by abalone 9y ago
Actually iOS does notify you when another device has joined your trust circle. So if you pay attention to that you’d know you’re being monitored. Suppressing that would need a crafted OS pushed to the device. iMessage is very secure. The re
976.
by abalone 9y ago
That is a very good question. I doubt they are praying for failure though.
977.
by abalone 9y ago
Of course Apple controls the software. Apple or any manufacturer could push an update overnight that disables all encryption and transmits your data to Donald Trump or whoever they want the next time you enter your passcode. There’s exactly
978.
by abalone 9y ago
Look, if Apple is the adversary and willing to lie under oath then there’s not much anyone could do. They could sign and push crafted firmware to a target device, game over. The question at hand is, if you trust that iMessage/iCloud wo
979.
by abalone 9y ago
True! But this also would be detectable by security researchers monitoring the output of devices. Just comparing bandwidth usage would reveal if there is an extra recipient.
980.
by abalone 9y ago
> Assuming Craig Federighi didn't perjure himself, why has China seemingly made an exception for Apple when it comes to iMessage (or iOS or iCloud)? The answer is that Apple is the only tech company that actually has leverage with
981.
by abalone 9y ago
August 2016 is not that old, it clearly applies to this situation (“adversarial clouds”), and also the salient points are documented in the iOS security white paper which is updated annually: https://www.apple.com/business&#
982.
by abalone 9y ago
eridius is right. Apple cannot update the firmware of the backend HSM clusters without data loss. (If you believe what they say.) They literally throw the signing keys into a blender. The article refers to device firmware not the iCloud bac
983.
by abalone 9y ago
> Where Apple provides overwhelming detail about their best security systems (file encryption, iOS, iMessage), they provide distressingly little technical detail about the weaker links like iCloud encryption. Sounds like the author mis
984.
by abalone 9y ago
Apple doesn't even have the encryption keys for iCloud Keychain. They've taken a very hardcore secure approach to this that is explicitly designed for "adversarial clouds". This isn't true for all iCloud data, but t
985.
by abalone 9y ago
Fine, then give them both Fs, don't call 100% manual lane changing "perfect". The reviewer also experienced frequent highway disengagements by the SuperCruise system which you can observe in the video, yet still rated it hi
986.
by abalone 9y ago
It's kind of a weird review. For example it rates Cruise's lane changing superior -- "as perfect as it gets" -- because it simply requires you to do it manually . (The "perfection" is in how the UI clearly com
987.
by abalone 9y ago
My take (just the first five): 1. A cure for the disease of which the RIAA is a symptom. Spotify & Apple Music. Pay $10/mo for unlimited access to most music. Took the wind out of music piracy. (TV & film are undergoing a sim
988.
by abalone 9y ago
> If you don't solve 98% of peoples' problems, it seems like you have a problem Nah, great products are about focus. You definitely don't want to scope your focus as "98% of peoples' problems."
989.
by abalone 9y ago
It could be ADHD, but believe it or not I'd explore whether it's an addiction issue. I think there should be more discussion and analysis of the relationship between addiction and chronic procrastination. What else are you doing w
990.
by abalone 9y ago
> even if it's just anecdotal... there does seem to be some measurable degradation in their Apple's standards as of lately You just characterized anecdotal evidence as "measurable". That's exactly the logical f

More ›