News for hackers. Stuff that matters.
Re:iMessage with PQ3 Cryptographic Protocol by sneak on Wednesday February 21, 2024 @12:11PM (#39456505)
These are the defaults. You don’t need to turn on iCloud Backup, it’s already on. You don’t need to turn off Advanced Data Protection, it’s already off.

Literally all you need to do is turn on a new iPhone and try to install any app. It will prompt for your Apple ID login (impossible to install apps without it) and will automatically enable iCloud, iCloud Backup, and iMessage (and will not enable ADP).

https://www.forbes.com/sites/kateoflahertyuk/2020/01/21/appl...

They explicitly killed the e2ee support for backups some time ago at the behest of the FBI to preserve the backdoor. It’s still practically backdoored for nearly all iMessage users because it is off by default (and the UX sucks even if you turn it on). Approximately nobody is using it; the status quo is preserved. iMessage is backdoored and is not e2ee due to key escrow. If you message someone on iMessage, Apple will be able to read the message, even if you have ADP enabled (because the other endpoint does not). That’s fact, today.

Additionally, even if you turn on ADP, the hashes of unencrypted file content in iCloud are stored non-e2ee, so Apple can still see who has which unique files and when, and who else receives them and when. This allows them to monitor social graphs, too.

Re:iMessage with PQ3 Cryptographic Protocol by overstay8930 on Wednesday February 21, 2024 @12:17PM (#39456597)
iMessage is excluded by default on iCloud backups, that's what the other guy is saying
Re:iMessage with PQ3 Cryptographic Protocol by rekoil on Wednesday February 21, 2024 @03:02PM (#39458739)
Messages in iCloud (different thing, used for syncing iMessage conversations to all your devices) is off by default, to my knowledge backups of the iMessage database is on by default in the iCloud backup setting, but admittedly I haven't setup a new device without restoring an iCloud backup in many many years.
Re:iMessage with PQ3 Cryptographic Protocol by mr_toad on Wednesday February 21, 2024 @09:05PM (#39462249)
Messages is iCloud is mostly used to free up local storage, and to sync old messages to new devices. You don’t need it to sync messages most of the time.
Re:iMessage with PQ3 Cryptographic Protocol by rekoil on Wednesday February 21, 2024 @02:59PM (#39458695)
> and will not enable ADP

Not only will it not enable ADP, it won't even ask you about it.