News for hackers. Stuff that matters.
Re:Apple can read your iMessages (even though they’re E2E en... by threeseed on Saturday August 28, 2021 @05:30PM (#28341684)
a) No one is blaming the user.

b) End to end encryption has always meant transport encryption not encryption at rest.

Re:Apple can read your iMessages (even though they’re E2E en... by amarshall on Saturday August 28, 2021 @06:26PM (#28342066)
> End to end encryption has always meant transport encryption not encryption at rest.

Sure, but if someone in the middle wants to store, then they don’t have anything unencrypted to store. Ultimately it all depends what one defines the “ends” as. In general for backup, both ends are the user. For chat, the sender and recipient. Apple is not an end, but a provider in the middle.

Re:Apple can read your iMessages (even though they’re E2E en... by d1sxeyes on Sunday August 29, 2021 @05:43AM (#28345447)
User A messages user B using iMessages.

User B screenshots all of those messages and uploads them unencrypted to a random FTP server.

Now replace the random FTP server with iCloud. Or Google Drive. Does that change the nature of the messaging between User A and User B? I would say it doesn't. In fact, WhatsApp does basically the same.

Re:Apple can read your iMessages (even though they’re E2E en... by amarshall on Sunday August 29, 2021 @07:18PM (#28351386)
No, but it means the backup is not end to end.
Re:Apple can read your iMessages (even though they’re E2E en... by foxpurple on Saturday August 28, 2021 @07:21PM (#28342453)
End to end encryption usually refers to users being the ends and the service provider being the transport. So while it is sitting on apples servers it is kind of in transport but delayed until you make the request to get it back.
Re:Apple can read your iMessages (even though they’re E2E en... by threatofrain on Saturday August 28, 2021 @05:38PM (#28341749)
I mean, I'm blaming the user. What's wrong with that in this context? Similarly, if your region hates spicy food and thus spicy is dying in your area, I'd be blaming the region too.

If you think the word "blame" is too morally hot, then we can always go with causal attribution.

Re:Apple can read your iMessages (even though they’re E2E en... by amelius on Saturday August 28, 2021 @05:40PM (#28341758)
a) this feature supposedly exists for the average user who wants to have their data back if they forget their password. Apple points at the user and says they are the reason for having this backdoor.

b) this is just false; whether the data is at rest or not has nothing to do with the definition of the term. And it is misleading in any case.

Re:Apple can read your iMessages (even though they’re E2E en... by threeseed on Saturday August 28, 2021 @05:49PM (#28341808)
a) It's not a backdoor but an explicit design tradeoff. It's hypocritical to be calling people out for using terms correctly and then misuse the term backdoor.

b) The etymology of the term has been blurred by WhatsApp referring to it as both transport and encryption at rest. But historically it has not included the latter part.

Re:Apple can read your iMessages (even though they’re E2E en... by amelius on Saturday August 28, 2021 @05:57PM (#28341859)
> It's hypocritical to be calling people out for using terms correctly and then misuse the term backdoor.

No, it's not because it is another instance. Someone can have one thing right and another thing wrong. And whatever the true meaning of "E2EE", its use in this case is misleading at best, so I'm pretty sure that the profession does not approve of it.

Re:Apple can read your iMessages (even though they’re E2E en... by JadeNB on Saturday August 28, 2021 @05:49PM (#28341803)
> a) No one is blaming the user.

The user is being used as an excuse: "we compromise your privacy because that user over there wants it". This is not blame in the obvious sense of "it's that user's fault that they lost their data", but it is blame: "the responsibility for this thing isn't ours, the people who wrote the code, but yours."

Re:Apple can read your iMessages (even though they’re E2E en... by beermonster on Sunday August 29, 2021 @04:03AM (#28345004)
E2ee, transport encryption, encryption at rest and client side encryption are all different things.
Re:Apple can read your iMessages (even though they’re E2E en... by spsful on Saturday August 28, 2021 @06:50PM (#28342237)
OP is quite literally blaming the user.