News for hackers. Stuff that matters.

A comment on No Thank You, Mr. Pecker. Parent comment

Re:No Thank You, Mr. Pecker by thecatspaw on Friday February 08, 2019 @02:18AM (#19112170)
Remember the fappening? It doesnt need to be remote grabbing, people just upload their nudes to the icloud. Maybe jeff did as well.

While apple says they are end to end encrypted, I also assume they work with the FBI/whoever to catch owners of illegal content, so they probably would have a way to get the unencrypted content.

[ Parent | on HN ]
Re:No Thank You, Mr. Pecker by gbear605 on Friday February 08, 2019 @02:40AM (#19112250)
The “fappening” was done by phishing, not a direct hack on iCloud servers.
[ Parent | on HN ]
Re:No Thank You, Mr. Pecker by fauigerzigerk on Friday February 08, 2019 @03:11AM (#19112355)
Photos and files stored in iCloud are not end to end encrypted: https://support.apple.com/en-gb/HT202303
[ Parent | on HN ]
Re:No Thank You, Mr. Pecker by thecatspaw on Friday February 08, 2019 @03:43AM (#19112476)
Oops, I actually looked at that page, but misinterpreted it
[ Parent | on HN ]
Re:No Thank You, Mr. Pecker by kkarakk on Friday February 08, 2019 @03:49AM (#19112501)
"working with" the fbi usually means the fbi provides hashes of images containing illegal content like child pornography and image providers give up any accounts that contain images with those hashes(google does it this way)

they don't just give the fbi data access without a court order

[ Parent | on HN ]
Re:No Thank You, Mr. Pecker by thecatspaw on Friday February 08, 2019 @04:28AM (#19112692)
Sure, but to be able to create the exact same hash as the FBI you need to be able to access the unencrypted content.
[ Parent | on HN ]
Re:No Thank You, Mr. Pecker by mschuster91 on Friday February 08, 2019 @08:06AM (#19113745)
Local client creates hashes and transmits them together with the metadata and the encrypted data, Apple compares incoming hashes with FBI/NCMC/... databases. Easy as that.
[ Parent | on HN ]
Re:No Thank You, Mr. Pecker by toephu2 on Friday February 08, 2019 @12:53PM (#19116818)
Please read my post again, my theory covers that: "or she fell victim to a phishing attack (or account recovery hack)."
[ Parent | on HN ]