News for hackers. Stuff that matters.
Re:Apple alerts users in 92 nations to mercenary spyware att... by sneak on Thursday April 11, 2024 @02:58PM (#40005572)
Nope. Even opting into ADP, your iMessage conversations will still be backed up to Apple without e2ee - just from the non-ADP phones of all the people you iMessage with instead of your own phone.

iMessages are backed up in duplicate - once on the sender and once on the receiver. You can only control e2ee for half of it, so your conversations are still under surveillance unless everyone you message with has also turned on ADP.

Re:Apple alerts users in 92 nations to mercenary spyware att... by Cyphase on Thursday April 11, 2024 @09:28PM (#40008608)
Is there any E2EE messaging service, or network protocol of any sort, that doesn't suffer from this? If an endpoint is compromised in whatever way, it doesn't matter how encrypted the data is in transit.
Re:Apple alerts users in 92 nations to mercenary spyware att... by sneak on Friday April 12, 2024 @01:37AM (#40009684)
Signal doesn’t have this problem.

By your terminology, all iOS devices are “compromised” by default from having non-e2ee iCloud Backup enabled by default.

Signal chats on iOS are stored in a storage class that cannot be backed up or exported from the device.

Re:Apple alerts users in 92 nations to mercenary spyware att... by saagarjha on Friday April 12, 2024 @05:04AM (#40010673)
Which is, of course, often not what users actually want.
Re:Apple alerts users in 92 nations to mercenary spyware att... by sneak on Friday April 12, 2024 @11:23AM (#40013973)
Users want their messages and iMessaged nudes to be private from Apple and warrantless FBI snooping. Presently, they aren’t.
Re:Apple alerts users in 92 nations to mercenary spyware att... by saagarjha on Friday April 12, 2024 @01:37PM (#40015495)
Pretty sure Apple requires a warrant to decrypt those.
Re:Apple alerts users in 92 nations to mercenary spyware att... by sneak on Friday April 12, 2024 @02:07PM (#40015872)
You are incorrect.

https://en.m.wikipedia.org/wiki/PRISM

From the front page of the Times today, they are renewing the law that says they have to do it without a warrant (FISA Section 702, aka PRISM).

https://www.nytimes.com/2024/04/12/us/politics/surveillance-...

You’ll note that this is regularly and frequently used by the FBI against domestic users (such as BLM protesters). Apple processes these FISA demands on over 70,000 user accounts every year, and the number is increasing. (That’s just the count for the warrantless FISA stuff - search warrants are a different (larger) figure.)

They also expanded it to allow them to search Apple’s data on people entering the US as visitors.

> The House also passed several other significant amendments. They included allowing the Section 702 program to be used to gather intelligence on foreign narcotics trafficking organizations and to vet potential foreign visitors to the United States; empowering certain congressional leaders to observe classified hearings before a court that oversees national-security surveillance; and expanding the types of companies with access to foreign communications that can be required to participate in the program.