News for hackers. Stuff that matters.

A comment on Apple's child protection features spark concern within its own ranks: sources. Parent comment

Re:Apple's child protection features spark concern within it... by heavyset_go on Friday August 13, 2021 @12:42PM (#28171269)
It's encrypted at rest, but Apple has the decryption keys, and will give up your customer data when asked to by the government[1]. Also, iCloud photos are not encrypted[2].

[1] https://www.apple.com/legal/transparency/us.html

[2] https://support.apple.com/en-us/HT202303

[ Parent | on HN ]
Re:Apple's child protection features spark concern within it... by porpoisemonkey on Friday August 13, 2021 @12:52PM (#28171407)
> Also, iCloud photos are not encrypted[2].

According to the table on the second link iCloud Photos are encrypted on the server (at rest). Am I missing something?

[ Parent | on HN ]
Re:Apple's child protection features spark concern within it... by mulmen on Friday August 13, 2021 @09:28PM (#28176932)
They are encrypted at rest. This protects from someone hacking in to Apple, getting the data on disk but somehow not getting the keys, which Apple also possesses.

Apple (and thus, LEO) absolutely can look at your photos on iCloud. What you are missing is that "encrypted at rest" is essentially "not encrypted in any meaningful way".

[ Parent | on HN ]