I think they are showing signs of working towards that
It's a bit like turning the Titanic -- it doesn't happen quickly, even if they want it to
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple's Craig Federighi Discusses Expanded iCloud End-to-End Encryption
- Thread starter MacRumors
- Start date
- Sort by reaction score
I think they are showing signs of working towards that
It's a bit like turning the Titanic -- it doesn't happen quickly, even if they want it to
It’s safer this way. It’s all encrypted with a key, but if you give a browser the key to decrypt, then the browser becomes a potential target, and Apple only controls their browser and not others, and it’s easy to spoof being Safari with just a change of user-agent headers.
It’s a lot like how using Apple Pay is safer than using a credit card number to pay. If you have a site working with the credit card number, a vulnerability somewhere in the stack can expose it to hackers, or it could be phished, but Apple Pay never transmits the card number, it does transmit a virtual number that is linked to an account but an additional protections prevent someone from hijacking Apple Pay without an authenticated device. A card number has no such protections that Apple Pay has.
They use the Secure Enclave to ensure that keys stay on device and only get accessed by the owner.
Well, you can make money morally. IMHO, Apple so far has achieved both. Don't you agree?
Unfortunately, a lot of companies are on varying scales of evil these days. It's pretty much pick your poison at this point. I tried avoiding all unethical companies for a while. What I learned is, it's either impossible or extremely expensive. The only genuine option is to go live off the land like the Amish.
Do you mind doing some research? Their ongoings in China have been in the public eye for a while now. Nothing I said is allegations. They are things that have and are literally happening right now.
This is really good news for data security in general. No doubt that the master key that unlocks my cloud data is re-encrypted twice: once with my Apple account key and once with a three letter agency's key. My account can open the the lockbox that holds the master key to my cloud data and there's some other key out there that can open a different lockbox that holds the same master key to my cloud data. For the average person though, this is a much better option than what Apple had before.
It's not propaganda. Turning a blind eye because Apple makes statements that contradict their actions isn't productive. And it isn't off topic because it's dealing with end to end encryption, or a complete lack thereof, in China.
It looks like you are too set in your thinking. China == bad. I get it.
Again, maybe you should try to expand your horizon a little.
Well, you are the one doing the claims. Shouldn't the onus be on yourself to prove those claims?
I'm not sure this will be more secure. Apple has technology to identify your data on device and offload it so even if it was encrypted on iCloud your data could be offloaded unencrypted to some other server as well.
This means nothing for most people because the people Apple would be giving the information to don't care about most people. For the people that it means something to it means a lot.
This means nothing for most people because the people Apple would be giving the information to don't care about most people. For the people that it means something to it means a lot.
China isn’t bad. The CCP is bad. Are you not paying attention to what’s going on over there? Literal genocide. My thinking isn’t limited. I’m just able to observe what’s going on in the world without bias. There are real tragedies going on in the world. Open your eyes to them.
Well, so does Google, Samsung, etc. What's your point? We should all go back to the pre-Internet age?
Don't you think if Apple is doing what you claimed, that they will be caught very very quickly?
Uyghur slave labor camps and forced organ harvesting are not new concepts. If you’re not aware of this, then there’s no more point in continuing this exchange.
I would be willing to bet Google and Samsung do it. No we don't need to go to pre internet but we should try to keep some of our privacy. I mean why else would you want to encrypt your iCloud in the first place?
Caught? They're open about doing it... Think of the children! How can you be against the children! That's the ruse they're using to justify it. They announced they were implementing it as a CSAM protection but they haven't said anything about it since because of public backlash. My guess is they waited till the news story quieted down then put it out as an OS update. Of course that's only a guess because only Apple knows.
So I am suppose to accept what you say as the definitive proof? Somehow I don't think it works like that no?
All I see are allegations. There's no proofs showing such thing happens.
Take for example, there are articles claiming of forced labours used in Xinjiang's cotton fields using forced Uigher's labourers, when in fact most of the workforce in the cotton fields comes from outside of the Xinjiang province. Most Uigher youngsters do not want to work in the cotton fields and prefer going to big cities to work. And most Xinjiang's cotton fields are mechanised now, with not much manual require. When USA banned John Deer tractor exports to China, it hit the Xinjiang cotton farmers hard.
If you are not aware, the CCP has lifted China's population from poverty for the past 30-40 years? Actions speaks louder than any articles that can be found online. Many Chinese can now afford oversea tours, and many indeed have, and they have exposed themselves to the outside world. With the proliferation of the Internet, many Chinese youth have also experienced Western cultures. Conversely, not many know of the Chinese culture. Maybe that is why there disconnect there.
I'm not saying that the CCP is an angle sent by god. Far from it. Any governments is to improve the lives of their people. I think the CCP has achieved that.
Now, before I get accused as a CCP shill, I have to again state that I'm not from China. I just have a more balanced view of the East.
So again, maybe you should expand your horizon and perspective and try to see the issue from many angles.
Travel more and talk to the locals.
Your view isn't balanced, it's biased in favor of Apple not capable of doing wrong, which is evidenced by your earlier comments. I don't care what economic advancements China has made. They actively oppress their people, which is why there are massive protests in the country right now. And they actively participate in the genocide of the Uyghur people, which is not a claim, it's a very real and nightmarish situation going on over there. Your disbelief that China can commit these atrocities against human beings is the issue here. I don't have some skewed hatred toward China. I think China is a beautiful country full of beautiful people. But that beautiful country full of beautiful people is being tyrannically oppressed by their Communist government.
You're literally stating the CCP is improving the lives of their people. That is the exact opposite of what they are doing right now. Yes ... great ... wonderful that their poverty is being reduced. That doesn't change the fact that China is an oppressed wasteland right now. And I do know people from China. I'm not unfamiliar with what's going on there.
And yes ... you sound like a mouthpiece for the Chinese government with how you are portraying them.
I wish Apple would stop bowing down to the CCP to spite Chinese citizens just to get a foothold in the country for more sales. They actively remove these encryption and privacy features from Chinese iPhones. They disabled AirDrop because protestors were using it to share information with each other. It's insanity. Apple are not saints.
I doubt it. It doesn't benefit them financially. Somehow I doubt Google or Samsung will do it if it didn't provie them with an ROI.
Because it allows them to claim that they cared about their user's privacy and thus sell more of their products?
Hmm ... my memory tells me differently. Apple were open about what they intend to do for their future OS update, i.e. to include the capability to detect photos known to be CSAM before sending to iCloud. My take is that it is to prepare for E2EE for iCloud Photo. They got grilled because of it.
What did Apple got caught with?
That Apple did roll out E2EE for iCloud Photo without depending on on-device CSAM scanning is a good thing, no?
Actually I can say that your view is equally biases towards Apple as evil.
I'm just asking or proof and balance view.
You are again typing typical view points from Western media. There's no proof from them as far as I can tell, just allegation.
In your expert view, how is the CCP ruining the lives of the Chinese?
How is China an oppressed wasteland?
So the people you know from China all tells you that China is an oppressed wasteland?
So anyone disagreeing with you on China is automatically a CCP mouthpiece. Ok. Got you.
I don't think I have ever claimed that Apple is a saint. Far from it. I just see allegation without proofs.
I think we will probably go in circles over this and it is off-topic. So I'll just respond to those regarding Apple's implemantation of E2EE.
They launched a bunch of privacy and encryption-based features and media releases.
You know android has had e2e encrypted cloud backup for like 8 years right?This is really big, surprising move from Apple, probably part of the reason of dropping CSAM, but I have this feeling that the government no longer needs these keys because of the advances in quantum computing.
Google now it is your turn, Apple called your bluff.
They didnt disable airdrop, they put a 10m limit on airdropping to anyone. Yes its bad but at least don’t lie about it.