News for hackers. Stuff that matters.
Re:The U.K. Government Is Close to Eroding Encryption Worldwide by matthewdgreen on Friday July 28, 2023 @09:40PM (#36915893)
Apple has claimed that they don’t allow China to intercept communications using these keys. They’ve said on the record that they don’t do any combination of these things to the WSJ without any ambiguity (Google Apple China encryption keys WSJ). If you could show that they were compromising security for the Chinese government but not making any allowances for the FBI, and that their executives were lying about it — that would be a huge scandal. There would almost certainly be congressional hearings, simply because any one of (Apple, China, famous executives caught lying) is by itself an opportunity for Congresspeople to get their face on TV. There would be huge US government pressure for Apple to (at minimum) cease collaborating with China to surveil its people. Potentially Apple’s entire business in China could be at risk, not to mention their whole supply chain. In the long run Apple might maneuver out of the situation, but in the short run it would certainly affect them very badly.
Re:The U.K. Government Is Close to Eroding Encryption Worldwide by sneak on Saturday July 29, 2023 @02:34AM (#36917529)
> Following this there would be huge US government pressure for Apple to (at minimum) cease collaborating with China to surveil its people, or else to offer the same capability to the US government.

Congress knows this would only kneecap one of their largest companies (with no fallback option at present). There is no iPhone without China.

Apple can and does already provide surveillance of this type domestically to FBI/DHS/et al. Approximately all iMessages are readable by Apple and extension by the USG in real-time, with or without a warrant.

Re:The U.K. Government Is Close to Eroding Encryption Worldwide by fsckboy on Saturday July 29, 2023 @03:39AM (#36917845)
>Apple has claimed that they don’t allow China to intercept communications using these keys. They’ve said on the record to the WSJ that they don’t do any combination of these things, and they left very little wiggle room in their denials

There's wiggle room in what you wrote: "Apple doesn't allow China to intercept communications, China just does it on their own" for example is a way to parse that sentence.

Re:The U.K. Government Is Close to Eroding Encryption Worldwide by giaour on Saturday July 29, 2023 @07:42AM (#36919245)
That would be a bigger scandal. If Apple's communication protection protocols could be subverted in flight (i.e., not via endpoint compromises) without Apple's consent or active participation, that would imply that the protocols themselves were just for show.
Re:The U.K. Government Is Close to Eroding Encryption Worldwide by kahnclusions on Saturday July 29, 2023 @04:50AM (#36918263)
Chinese national security law includes a gag order for such assistance requests.

Apple can say they don’t allow it, because their local partner company is the one actually doing it. And the local partner would say they don’t allow it, because Chinese law (and the Party) requires them to keep all national security assistance secret.

Re:The U.K. Government Is Close to Eroding Encryption Worldwide by matthewdgreen on Saturday July 29, 2023 @11:23AM (#36921144)
US executives can be compelled to testify truthfully under oath. There is no "Chinese law compels me to keep this secret" defense to perjury charges in the US. If credible evidence emerges, Apple executives will eventually be forced to admit whatever they know. The only viable strategy here is to have a broken system and plausible "not know" it's being exploited, but that's a very fragile approach (technically risky, vulnerable to whistleblowers) and it only works once.