Apple's Security Compromises in China Outlined in New Report

[Val-kyrie]

Apple has been making concessions on privacy and security in order to continue building and selling its devices in China, according to an in-depth report from The New York Times.

The focal point of the report is Apple's decision to comply with a 2016 law that requires all personal information and data collected in China to be kept in China, which has led Apple to build a China data center and relocate Chinese customers' iCloud data to China, managed by a Chinese company.

Apple fought against China's efforts to gain more control over customer data, but given China's leverage over Apple, Apple had no choice but to comply. There were initially disagreements over the digital keys that can unlock iCloud encryption. Apple wanted to keep them in the United States, while Chinese officials wanted them in China.

Ultimately, the encryption keys ended up in China, a decision that "surprised" two unnamed Apple executives who worked on the negotiations and who said that the decision could potentially endanger customer data. There is no evidence that the Chinese government has access to the data, but security experts have said that China could demand data or simply take it without asking Apple, especially given compromises in encryption key storage and the fact that a third-party company manages customer data on Apple's behalf.

In a statement, Apple told The New York Times that it "never compromised" the security of users or user data in China "or anywhere we operate." Apple says that it still controls the keys that protect the data of Chinese customers, and the China data center is using the most advanced encryption technology available, which is more advanced than what Apple uses in other countries.

Apple has also been removing apps from the App Store in China at the request of the Chinese government after China began requiring an official license to release an app. Apple told The New York Times that it has done so to comply with Chinese laws.The New York Times' report goes into much more detail on the compromises that Apple has made in China, and it is well worth reading in full.

Article Link: Apple's Security Compromises in China Outlined in New Report

Apple - China’s Handmaiden

 

[laptech]

Correct me if I am wrong but wasn't there a case recently where there was to be a sell off of a social media company owned by a Chinese company and the US government said that data on US citizens is to stay in the US and this Chinese company complained bitterly against it plus the Chinese government got involved complaining about how one of it's companies was being treated by the US and low and behold, China has a law that does EXACTLY the same thing.

China has laws which limits what western companies can do in China but when a western country does exactly the same to a Chinese company, the Chinese government cries foul. the Chinese government knows what makes the world go round..money, and they know western companies are greedy to the extent that they can exploit that greed by offering western companies cheap labour. Apple, as well as many other companies will be prepared to sacrifice security and privacy for the sake of money.

 

[wanha]

Not from China

I get the sentiment, but good luck finding a phone or computer or even underwear that isn't made in China

 

[wanha]

Not grandstand and use the company I run as my personal soapbox to push my liberal agenda for starters.....

So which agendas do you grandstand and push on others? And don't say none, because otherwise you wouldn't have public opinions and we both know that's not exactly... true.

 

[wanha]

Again that is entirely normal. Germany has similar requirements for data at rest. And Russia as well. No need to shout about possession, there really is no need to dramatise about it. Keeping the keys in country and access is entirely normal. The privacy shield arrangements between the US and EU also come with a lot of rules.

Those are just the rules of the country. It is a very complex business to comply with all of them. And no it doesn’t compromise security and it won’t impact you if you don’t live in that country. It might impact you if you do business. It’s a standard part of doing business to educate oneself.

I can't believe you just equated with "data being in the country" and "the government being in possession of your servers".

 

[Td1970]

Is this surprising? Tim has to answer to his boss.

The truth sucks when you sell your soul to China and now have to eat your words back home.

 

[I7guy]

Is this surprising? Tim has to answer to his boss.

The truth sucks when you sell your soul to China and now have to eat your words back home.

What truth is “Tim eating?” The drivel from this thread? This is nothing but rehashed news.

 

[Naraxus]

So which agendas do you grandstand and push on others? And don't say none, because otherwise you wouldn't have public opinions and we both know that's not exactly... true.

You can have public opinions and not subject them to others

 

[steve333]

I get the sentiment, but good luck finding a phone or computer or even underwear that isn't made in China

I know, it sucks

 

[cyb3rdud3]

I can't believe you just equated with "data being in the country" and "the government being in possession of your servers".

Me neither, and a good thing as I didn't

 

[Steve Adams]

Not from China

I guess you don't use apple products then?

 

[DanTSX]

I get the sentiment, but good luck finding a phone or computer or even underwear that isn't made in China

I make a conscious effort to do just that. Often, with surprisingly positive results.

If I wasn’t solidly locked into Apple, Sony still (or until recently) has had some made in Japan phones.

I’m not trying to make a political or economic statement. I just like good stuff.

 

[wanha]

You can have public opinions and not subject them to others

You mean having a public opinion like not having public opinions and subjecting them to others?

 

[Naraxus]

You mean having a public opinion like not having public opinions and subjecting them to others?

You know precisely what I'm talking about. Or, since you keep evading the issue, maybe you don't.

Either way I'm done with you on this

 

[steve333]

I guess you don't use apple products then?

If I have no choice I have no choice, but I avoid it when I can, even if it costs more

 

[Steve Adams]

You do have a choice. Samsung products are made in South Korea. So you are being hypocritical.

 

[kk200]

Correct me if I am wrong but wasn't there a case recently where there was to be a sell off of a social media company owned by a Chinese company and the US government said that data on US citizens is to stay in the US and this Chinese company complained bitterly against it plus the Chinese government got involved complaining about how one of it's companies was being treated by the US and low and behold, China has a law that does EXACTLY the same thing.

China has laws which limits what western companies can do in China but when a western country does exactly the same to a Chinese company, the Chinese government cries foul. the Chinese government knows what makes the world go round..money, and they know western companies are greedy to the extent that they can exploit that greed by offering western companies cheap labour. Apple, as well as many other companies will be prepared to sacrifice security and privacy for the sake of money.

Wrong.

Tiktok suggested at very beginning to put their data on the US server and isolate the data from accessing by chinese law. The response was: US gov wants to shutdown the APP completely without any valid reason.

It was never the same conflict.

 

[steve333]

You do have a choice. Samsung products are made in South Korea. So you are being hypocritical.

Does it run the MacOS? Besides, I am talking mainly about Computers.

 

[Steve Adams]

Does it run the MacOS? Besides, I am talking mainly about Computers.

Again. Meaning your don't buy China rant is a load of crap.

 

[wankey]

What are you missing?

Well, for instance that the Chinese government are in POSSESSION of Apple's servers. Apple can only operate them remotely. Tell me another country where this is the case?

Secondly, there are no lengths China won't go to survey their citizens and this move essentially prevents Apple from keeping their customers' data secure and private in China. Again, please tell me another country where Apple is prevented from running their own servers and thus prevented from maintaining a chain of custody of their customers' data?

The Chinese government do not “possess” apples servers.

show me exactly how the ccp owns apples servers? Do they have a ccp cloud data center that apple runs their apps on?

from what I’ve see in China, it’s no different than here. Apple runs their servers and just have to allow ccp officials data when they request it like the fbi and cia do here.

ccp is not a tech company

 

[steve333]

Again. Meaning your don't buy China rant is a load of crap.

Follow the thread, reading comprehension is your friend

 

[Steve Adams]

Follow the thread, reading comprehension is your friend

I comprehended what you said just fine. You will pay more for apple items made in China because you are a hypocrite. Either boycott or don't. Don't be one of those people who get on a soapbox and crow and the do the exact thing you are crowing about.

 

[steve333]

I comprehended what you said just fine. You will pay more for apple items made in China because you are a hypocrite. Either boycott or don't. Don't be one of those people who get on a soapbox and crow and the do the exact thing you are crowing about.

Like I said, I boycott made in China whenever possible. Nothing hypocritical about it

 

[Steve Adams]

Like I said, I boycott made in China whenever possible. Nothing hypocritical about it

Sure there is, because you DON'T boycott. You purchase one of the most evil companies devices. Using slave labor and coddling the Chinese government. Again, you are hypocritical.

 

[I7guy]

Sure there is, because you DON'T boycott. You purchase one of the most evil companies devices. Using slave labor and coddling the Chinese government. Again, you are hypocritical.

Which company is that? Because there is a laundry list of them that use "slave labor". (not really, but the hyperbole is good)