News for hackers. Stuff that matters.
Re:Ask HN: E2E Encrypted Period Trackers? by amluto on Friday June 24, 2022 @08:14PM (#31871127)
If Apple cared more about privacy, they could address this with a category of enforced local-only apps. A local-only app would not be able to access the network or interact with other apps. It’s data could be backed up and synced via iCloud but not by any other means.

Side channels aside, this would avoid data leaks.

Re:Ask HN: E2E Encrypted Period Trackers? by account-5 on Saturday June 25, 2022 @06:45AM (#31874165)
Except if Apple receives a warrant for the iCloud data surely?
Re:Ask HN: E2E Encrypted Period Trackers? by amluto on Saturday June 25, 2022 @08:25PM (#31879897)
There’s a choice between:

(a) Company that wants to make as much money as possible from the use of their app. They will use tracker SDKs, sell data directly, sell data through aggregators, etc. And they’ll cooperate with subpoenas (but probably try to charge for it). And they might even cooperate with Texans who want to sue people under their bizarre law.

(b) Apple, which makes money off hardware, iCloud services, and to a limited extent, advertising. They will cooperate with subpoenas, but they also have the legal resources to fight them. And, for something like their customers’ health data, they quite likely will fight.

With choice (a), law enforcement and anyone else who wants to pay gets the data. With choice (b), law enforcement might get the data. I know what I would choose.

Obviously I would prefer (c), the hypothetical version of Apple with stronger iCloud backup encryption.