News for hackers. Stuff that matters.

A comment on Zero click vulnerability in Apple’s macOS Mail. Parent comment

Re:Zero click vulnerability in Apple’s macOS Mail by rnikander on Friday April 02, 2021 @01:04PM (#26673351)
Okay, so if I understand correctly, the data in those Apple products is not secured, but turning on iCloud on a device does not ruin encryption for other apps that take it seriously. So if I have an app that uses Keychain (end-to-end encrypted) and encrypts it's data properly, it is still secure.

Unless Apple is really bad and somehow collects my keys from keychain, or collects keys passed to CryptoKit, etc., straight out of RAM, and sends them to 3-letter agencies ... if I think that's happening, then I will look for new devices.

[ Parent | on HN ]
Re:Zero click vulnerability in Apple’s macOS Mail by codemac on Friday April 02, 2021 @02:45PM (#26674526)
I'm not sure I understand your keychain point. With iMessage you can message others with just your iCloud credentials if you turn it on, and you have access to full conversation history - without needing any particular device keys.
[ Parent | on HN ]