News for hackers. Stuff that matters.
Re:Apple plans to scan US iPhones for child abuse imagery by sandworm101 on Thursday August 05, 2021 @02:27PM (#28077605)
If apple really cares about security then those images in iCloud should be stored in an encrypted form that makes hash comparisons impossible. If they are hashing them then they have access to them in plaintext. If I used iCloud I would be more worried about the wider implications that creates.
Re:Apple plans to scan US iPhones for child abuse imagery by Retric on Thursday August 05, 2021 @02:34PM (#28077689)
iCloud needs to allow people to restore backups on a new iPhone after losing their old one.

You can setup secure encrypted backups, but the customer losing the key means losing the back so that’s not what consumer focused companies are going to do. In other words any backup service that doesn’t have big warnings that losing your key loses your backup means they can read your data.

Re:Apple plans to scan US iPhones for child abuse imagery by sandworm101 on Thursday August 05, 2021 @02:57PM (#28077982)
https://blog.cryptographyengineering.com/2012/04/05/icloud-w...

"The mud puddle test: You don’t have to dig through Apple’s ToS to determine how they store their encryption keys. There’s a much simpler approach that I call the ‘mud puddle test’"