Re:Apple's iCloud+ “VPN”
by opheliate on Wednesday June 16, 2021 @11:21AM
(#27529524)
Surely some "unique" identifier is required for each TCP session between Apple and the exit node so that Apple knows where to send the data it gets back, even if it's just the port on which Apple connect to the exit node as with standard TCP session management.
[ Parent
| on HN ]
How would that help you identify all of a particular users interactions (rather than one)? Why would you expect them to log it?
If Apple logged (incoming IP from user, outgoing port to exit node) pairs for each session, and the exit node logged all requests, this should be sufficient to associate all requests with a given user IP, right? Or am I misunderstanding you?
I wouldn’t expect them to log it, personally, I think that can only lead to headaches down the line. My reason for responding is just that I disagree that there is no way for another party to associate all requests even if Apple & exit node both fully cooperate and keep logs.