News for hackers. Stuff that matters.
Re:Does Apple really log every app you run? A technical look by throwawayg123 on Saturday November 14, 2020 @05:33PM (#25096291)
Wait. Is it not common knowledge that Android and iOS log every application you open down to the exact millisecond you open and close them?

Is it not common knowledge how telemetry works for the operating systems? They generally batch up a bunch of logs like this, encrypt them, compress them, and then send them to the mothership (hopefully when you're on WiFi).

Re:Does Apple really log every app you run? A technical look by viraptor on Saturday November 14, 2020 @05:59PM (#25096487)
Logging and telemetry are completely separate use cases. For example to do some kind of battery use accounting you need some record of when exactly which app was active.

And no, it's not widely known or documented - there is no good description of what telemetry exists or contains on iOS that I know of.

Re:Does Apple really log every app you run? A technical look by randyrand on Saturday November 14, 2020 @05:37PM (#25096329)
don’t you need to enable analytics?
Re:Does Apple really log every app you run? A technical look by kenniskrag on Saturday November 14, 2020 @05:44PM (#25096371)
first compressed and then encrypted. A good encryption is indistinguishable from random data.
Re:Does Apple really log every app you run? A technical look by xncl on Saturday November 14, 2020 @08:08PM (#25097153)
That's why it's compressed before encryption?
Re:Does Apple really log every app you run? A technical look by avianlyric on Saturday November 14, 2020 @08:46PM (#25097411)
Yeah, because encrypted data should be incompressible, as it should be indistinguishable from random data, which is also incompressible.

Reality is a little different of course, and compression can cause problems for encryption because compressed data tends to be highly predictable (especially things like compression headers and compression dictionaries). This allows for potential “known/chosen plaintext” attacks on the encryption.

Some classic examples of this type of attack are breaking Enigma (known plaintext, no compression) by assuming the content of some messages[0] and the more recent CRIME[1] attacks against TLS using compression to help produce a chosen plaintext.

The simple solution in these scenarios is to avoid using compression completely.

[0] https://www.quora.com/Did-the-inclusion-of-Heil-Hitler-at-th... [1] https://en.m.wikipedia.org/wiki/CRIME