News for hackers. Stuff that matters.

A comment on San Bernardino County tweets it reset attacker iCloud password at FBI's request. Parent comment

Re:San Bernardino County tweets it reset attacker iCloud pas... by cmurf on Saturday February 20, 2016 @07:39PM (#11142714)
I don't think Apple is in the key escrow business anymore; on OS X they had such an option, to show the user the DEK and optionally store it. I don't think the DEK or KEK are backed up at all in iCloud. If you forget your password, all options I see involve device erasure.
[ Parent | on HN ]
Re:San Bernardino County tweets it reset attacker iCloud pas... by daxelrod on Saturday February 20, 2016 @10:02PM (#11143098)
It's hard to find this information on Apple's website. According to https://theintercept.com/2014/09/22/apple-data/

> Apple encrypts your iCloud data in storage, but they encrypt it with their own key, not with your passcode key, which means that they are able to decrypt it to comply with government requests.

Not sure if things have changed since then.

[ Parent | on HN ]