News for hackers. Stuff that matters.

A comment on Apple's “iCloud Private Relay” broke risk based authentication. Parent comment

Re:Apple's “iCloud Private Relay” broke risk based authentic... by cratermoon on Wednesday July 07, 2021 @12:09PM (#27762706)
The laws specifically mention "at rest". Where your traffic goes while in flight is not regulated. Legally, the US service can't grab and store your data, but that doesn't mean they can't analyze and use your data as it flows through.
[ Parent | on HN ]
Re:Apple's “iCloud Private Relay” broke risk based authentic... by dannyw on Wednesday July 07, 2021 @12:35PM (#27763003)
It is not clear what the laws say as FISA intrepretations are secret.
[ Parent | on HN ]
Re:Apple's “iCloud Private Relay” broke risk based authentic... by cratermoon on Wednesday July 07, 2021 @01:50PM (#27763869)
You're correct. I'm paraphrasing guidelines from a previous employer's legal department. The Ireland data center was our EU presence, and we needed to know the boundaries of "what happens in Ireland stays in Ireland", so to speak.
[ Parent | on HN ]