News for hackers. Stuff that matters.

A comment on Chinese authorities detain Apple employees suspected of selling customer data. Parent comment

Re:Chinese authorities detain Apple employees suspected of s... by chatmasta on Thursday June 08, 2017 @09:20AM (#14513963)
I assumed "encrypted at rest" to mean encrypted with the user's passcode, meaning it could only be decrypted from a properly authorized user session, not some internal apple tool.
[ Parent | on HN ]
Re:Chinese authorities detain Apple employees suspected of s... by andai on Thursday June 08, 2017 @03:29PM (#14516511)
> Privacy advocates and privacy caring IT specialists have repeatedly asked Apple to offer such an option, but so far Apple has decided that regular people would turn such an option on, forget their password, then ask Apple for help and would be unhappy with their brand experience if Apple could not help them out.

From Darthy's comment 30 minutes ago https://news.ycombinator.com/item?id=14513803

[ Parent | on HN ]
Re:Chinese authorities detain Apple employees suspected of s... by izuchukwu on Thursday June 08, 2017 @12:50PM (#14515395)
From my understanding, that is how Apple encrypts on device. They don't use this with iCloud data at rest and instead maintain encryption keys themselves [1] so in the event of, for example, a user losing their credentials, they would still be able to assist.

[1]: https://support.apple.com/en-us/HT202303

[ Parent | on HN ]