News for hackers. Stuff that matters.

A comment on Apple introduces end-to-end encryption for backups. Parent comment

Re:Apple introduces end-to-end encryption for backups by Alex3917 on Wednesday December 07, 2022 @04:34PM (#33900605)
This. It seems like for the average person, if you go from not using cloud backups to using cloud backups with their pin, then this is a huge step backwards for security.
[ Parent | on HN ]
Re:Apple introduces end-to-end encryption for backups by lxgr on Wednesday December 07, 2022 @05:16PM (#33901123)
On the other hand, for the average person already using unencrypted iCloud backups, it is a considerable step forwards, and arguably managing their own high-entropy recovery key could be a significant burden.

I just really wish they'd made PIN-based HSM escrow the default, but optional (with the "off" switch behind several scary-sounding warnings).

[ Parent | on HN ]
Re:Apple introduces end-to-end encryption for backups by Alex3917 on Wednesday December 07, 2022 @06:07PM (#33901698)
> for the average person already using unencrypted iCloud backups, it is a considerable step forwards

Maybe I'm missing something, but how is having a 6-digit password functionally any different than having no password at all?

[ Parent | on HN ]