Zero click vulnerability in Apple’s macOS Mail

Re:Zero click vulnerability in Apple’s macOS Mail by fauigerzigerk on Friday April 02, 2021 @02:41AM (#26669460)

Apple isn‘t simply running iCloud locally as the law may require. They have transferred the operations of their entire iCloud service to a government owned company, including all keys.

What Apple does in China is more than complying with local laws. They appear to be exceptionally proactive in staying in the regime‘s good graces.

[ Parent | on HN ]

Re:Zero click vulnerability in Apple’s macOS Mail by jhugo on Friday April 02, 2021 @02:50AM (#26669488)

Running cloud services in China requires establishing a JV with a local partner. Look at AWS China as another example of this, but there are many.

Can you provide a reference for Apple's JV partners being government owned? Any company in China of course has to do as the Party tells them to, so I guess the difference is largely academic, but I haven't seen it mentioned before that Apple's China partners are government-owned.

[ Parent | on HN ]

Re:Zero click vulnerability in Apple’s macOS Mail by fauigerzigerk on Friday April 02, 2021 @03:03AM (#26669535)

This is what was reported at the time:

https://techcrunch.com/2018/07/17/apples-icloud-user-data-in...

There are conflicting reports and vague language around how exactly the keys are handled.

[ Parent | on HN ]

Re:Zero click vulnerability in Apple’s macOS Mail by jhugo on Friday April 02, 2021 @03:04AM (#26669544)

Thanks for the link, very interesting.

[ Parent | on HN ]