News for hackers. Stuff that matters.
Re:Apple's child protection features spark concern within it... by speleding on Friday August 13, 2021 @05:12AM (#28166945)
As someone who frequently has to help older family members recover from lost passwords and broken phones, I sincerely hope they leave strong encryption of backups to be "opt out".

It's fine if you know you want to be the sole person in the world who can get to your data and have the discipline to store master passwords, and you accept Apple support cannot help you even if you have a purchase receipt for the device. But for the average older person that's not a good default.

Re:Apple's child protection features spark concern within it... by londons_explore on Friday August 13, 2021 @05:36AM (#28167065)
> help older family members recover from lost passwords and broken phones,

Apple just needs to design good UX to help these people.

Perhaps a large cardboard 'key' comes with every phone. When first setting up the phone, you scan a QR code on it to encrypt your data with the key, and then you tell the owner that of they ever lose the key to their phone, they won't be able to get in again.

People understand that - it's like losing the only key to a safe.

From time to time you require them to rescan the key to verify they haven't lost it, and if they have, let them generate a new one.

Re:Apple's child protection features spark concern within it... by GekkePrutser on Friday August 13, 2021 @08:07AM (#28167904)
You don't want that key to be in the box. Because of Apple printed it, they know it.

It's better if the key is generated when you already have the phone.

Re:Apple's child protection features spark concern within it... by Nextgrid on Saturday August 14, 2021 @09:44AM (#28180553)
Well if the alternative is the current situation where Apple has access anyway, a key that Apple may know is still a better idea.

For even better security they can instead provide an NFC smartcard or hybrid NFC + USB (like a Yubikey) where the key is stored in hardware and can't be extracted.

Re:Apple's child protection features spark concern within it... by bqmjjx0kac on Saturday August 14, 2021 @04:52PM (#28183844)
Apple also pushes software updates to the phone, so does it really matter? I'd be more concerned about a third party intercepting and copying the key.
Re:Apple's child protection features spark concern within it... by cameronbrown on Friday August 13, 2021 @07:36AM (#28167725)
Far easier to develop a culture of using something physical like yubikeys - over flimsy cardboard QR codes. The key metaphor makes a lot more sense that way, too.
Re:Apple's child protection features spark concern within it... by WastingMyTime89 on Friday August 13, 2021 @07:09AM (#28167566)
So you are suggesting making everyone life more cumbersome with the very likely potential of losing all the data on your phone because you lost a piece of cardboard or forgot a key for which benefit exactly? Being hypothetically safe for government scrutiny concerning information they could a dozen other way?

I really like E2E encryption of messages with proper backups on my end. It's good to know the carrier of my messages can't scan them for advertising purpose. But for my phone if I know there is no way to easily get the data back if I have an issue that seems like a major hassle with very little upsides.