News for hackers. Stuff that matters.
Re:Alternatives to Google Products by izacus on Sunday June 10, 2018 @11:54PM (#17281636)
Until it paid for them them to sell out their Chinese customers. There they didn't think for a second.
Re:Alternatives to Google Products by scarface74 on Monday June 11, 2018 @12:40AM (#17281853)
I have no more trust in the American government to not spy on its citizens than the Chinese government. If iCloud data is encrypted and only the user has the private key. It's just as secure as being on American servers.
Re:Alternatives to Google Products by ywain on Monday June 11, 2018 @05:34AM (#17282959)
Note that only some of your iCloud data is end-to-end encrypted: https://support.apple.com/en-us/ht202303. The rest is also encrypted, but Apple does have the key and can likely be legally compelled to share it with authorities.
Re:Alternatives to Google Products by scarface74 on Monday June 11, 2018 @11:46AM (#17285231)
What am I missing? According to the link, everything is encrypted at rest besides email. No one thinks email is secure.
Re:Alternatives to Google Products by rock_hard on Monday June 11, 2018 @01:22AM (#17282011)
The difference being that Tim Cook handed Beijing the iCloud private keys for Chinese users
Re:Alternatives to Google Products by scarface74 on Monday June 11, 2018 @01:45AM (#17282107)
How did he do that without completely rearchitecting how iOS works? Do you have any citations?
Re:Alternatives to Google Products by fauigerzigerk on Monday June 11, 2018 @06:29AM (#17283145)
This is about the architecture of iCloud not iOS. Apple has the keys to all encrypted iCloud data (iCloud email is not encrypted at rest).

The only exception is iCloud keychain, but I believe only if you decline the default setting to create an iCloud security code (I'm not entirely sure about that)

https://support.apple.com/en-us/HT202303

Re:Alternatives to Google Products by grumdan on Monday June 11, 2018 @02:43AM (#17282287)
I'm not saying that this is what happened and I don't know the background of this story, but it would have been easy (technically speaking) to just push an update to Chinese users that will extract their private key and send it back to Apple without any significant changes.
Re:Alternatives to Google Products by majewsky on Monday June 11, 2018 @03:56AM (#17282571)
AFAIK the Secure Enclave chip is specifically designed to make this impossible. There is no planned method to extract the private key from it. ("Planned method" meaning anything that's not an exploit or an electron microscope.)
Re:Alternatives to Google Products by zarex on Monday June 11, 2018 @04:46AM (#17282779)
Maybe generate the key in the normal processor, send it to apple for escrow, and then push the key to the secure enclave? I have no idea whether the secure enclave supports loading existing keys, but generally this is how it's done.
Re:Alternatives to Google Products by blind_boy_grunt on Tuesday June 12, 2018 @05:59AM (#17291986)
> I have no more trust in the American government to not spy on its citizens than the Chinese government.

This is more than a little hyperbolic. In the US you need a warrant.

Re:Alternatives to Google Products by scarface74 on Tuesday June 12, 2018 @02:49PM (#17296600)
Also, in the U.S., police don’t shoot unarmed suspects, get caught planting evidence on camera and the judicial system prosecuted and convicts fairly regardless of race and class and always follow the rules.....
Re:Alternatives to Google Products by soVeryTired on Tuesday June 12, 2018 @07:09AM (#17292215)
Snowden?