Re:Apple will notify users about state-sponsored cybersecuri...
by boomboomsubban on Wednesday November 24, 2021 @02:13PM
(#29333902)
So something like PRISM that targets everybody won't trigger a warning?
[ Parent
| on HN ]
Re:Apple will notify users about state-sponsored cybersecuri...
by funnyflamigo on Wednesday November 24, 2021 @03:09PM
(#29334515)
I doubt it.
Keep in mind this will only work for non-court-gag-ordered instances. If the US subpoenas Apple about an individual they won't be allowed to notify them.
I have no idea how this applies to other countries.
I think this is more like: "We noticed unusual API usage and we don't have a gag order so whatever it is, it's not likely to be good"
Re:Apple will notify users about state-sponsored cybersecuri...
by quitit on Wednesday November 24, 2021 @07:10PM
(#29336788)
The methods of detecting such attacks are not at all similar to a government requesting data which contains the non disclosure clause.
Apple doesn’t need to know the source of the attack to issue the warning, and if the attacker is competent Apple likely wouldn’t know the source, such that a gag would not apply.
Re:Apple will notify users about state-sponsored cybersecuri...
by simondotau on Wednesday November 24, 2021 @06:01PM
(#29336217)
To be fair, a subpoena isn't a cyberattack. But yes, this will be mostly of value of people being targeted by governments that are not the USA or best buddies with the USA.
Re:Apple will notify users about state-sponsored cybersecuri...
by WarOnPrivacy on Wednesday November 24, 2021 @10:22PM
(#29337917)
tl;dr: Apple will notify us as long as the attacking state isn't the US - which it very often is.
Re:Apple will notify users about state-sponsored cybersecuri...
by schleck8 on Wednesday November 24, 2021 @03:53PM
(#29335016)
It's rare that programmes like PRISM surface publicly. I don't see how Apple would gather top secret intel on national surveillance programmes on their own, so there is a good chance they aren't even aware.
Re:Apple will notify users about state-sponsored cybersecuri...
by GeekyBear on Wednesday November 24, 2021 @07:04PM
(#29336745)
In the case of Google, the NSA was reading their unencrypted replication traffic as it moved between data centers.
I don't see how Google could have been aware that this was happening, although they certainly could have known it was theoretically possible.