Apple brass discussed disclosing 128M iPhone hack, then decided not to

Re:Apple brass discussed disclosing 128M iPhone hack, then d... by petmon on Sunday May 09, 2021 @01:19AM (#27093432)

If Messages E2E crypto were backdoored, then why would the FBI take an interest in iCloud backups?

I too wish iCloud backups were E2E encrypted, but that is a very different claim from "Apple assumes you desire privacy from everyone but Apple." Apple knows you want privacy from Apple; their privacy policy is quite explicit about what data Apple cannot see.

https://support.apple.com/en-us/HT209110

[ Parent | on HN ]

Re:Apple brass discussed disclosing 128M iPhone hack, then d... by sneak on Sunday May 09, 2021 @01:59AM (#27093608)

iCloud Backup backs up the messages, or the message sync key in the case of Messages in iCloud being enabled.

iCloud Backup is not e2e encrypted, which means Apple either gets the full iMessage and SMS history (in the case of Messages in iCloud being disabled), or gets the e2e encryption key to decrypt the synced Messages in iCloud (which they already have, due to running iCloud).

https://support.apple.com/en-us/HT202303

[ Parent | on HN ]

Re:Apple brass discussed disclosing 128M iPhone hack, then d... by petmon on Sunday May 09, 2021 @04:30AM (#27094281)

Yes we agree that Apple has the technical capability of decrypting Messages that have been backed up by users who have enabled iCloud Backup, even if those messages were previously E2E encrypted. I think Apple should fix that.

Your link describes in detail what Apple can and cannot read. They seem to want their customers to know. So how did you conclude "Apple assumes you desire privacy from everyone but Apple?"

[ Parent | on HN ]

Re:Apple brass discussed disclosing 128M iPhone hack, then d... by sneak on Sunday May 09, 2021 @06:29AM (#27094829)

I belive that most users, after reading 202303 and Apple's public communications around privacy, would incorrectly conclude that Apple cannot read their iMessages.

[ Parent | on HN ]