News for hackers. Stuff that matters.
Re:Apple Pulls Encrypted iCloud Security Feature in UK by nottorp on Friday February 21, 2025 @11:56AM (#43129878)
I asked if your Android backup is encrypted. Implies I'm talking about unencrypted data.

> See, for example, the Las Vegas shooter case

I am not in Las Vegas or anywhere else in the US. So as far as i know all the data about me that is stored in the US is easily accessible without a warrant unless it's encrypted with a key that's not available with the storage.

> companies are not compelled to build systems which enable them to decrypt all data covered by the warrant

Again, not what I was talking about.

I'm merely pointing out that your data is not necessarily encrypted, and that the "rest of the world" was already unprotected vs at least one state. The UK joining in would just add another.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by skydhash on Friday February 21, 2025 @12:15PM (#43130152)
People always overestimate how much companies will defy their government for you, legally or otherwise.
Re:Apple Pulls Encrypted iCloud Security Feature in UK by GeekyBear on Friday February 21, 2025 @12:28PM (#43130318)
This is why Apple, and more recently Google, create systems where they don't have access to your unencrypted data on their servers.

> Google Maps is changing the way it handles your location data. Instead of backing up your data to the cloud, Google will soon store it locally on your device.

https://www.theverge.com/2024/6/5/24172204/google-maps-delet...

You can't be forced to hand over data on your servers that you don't have access to, warrant or no.

The UK wants to make this workaround illegal on an international basis.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by pmontra on Friday February 21, 2025 @02:04PM (#43131527)
> You can't be forced to hand over data on your servers that you don't have access to, warrant or no.

But you can be forced to record and store that data even if you don't want to.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by GeekyBear on Friday February 21, 2025 @02:46PM (#43132049)
Which is why Apple takes the stance that the users device shouldn't be sending data to the mothership at all, if it isn't absolutely necessary.

Compare Apple Maps and Google Maps.

Google initially hoovered up all your location data and kept it forever. They learned from Waze that one use case for location data was keeping your map data updated.

Apple figured out how to accomplish the goal of keeping map data updated without storing private user data that could be subject to a subpoena.

> “We specifically don’t collect data, even from point A to point B,” notes Cue. “We collect data — when we do it — in an anonymous fashion, in subsections of the whole, so we couldn’t even say that there is a person that went from point A to point B.

The segments that he is referring to are sliced out of any given person’s navigation session. Neither the beginning or the end of any trip is ever transmitted to Apple. Rotating identifiers, not personal information, are assigned to any data sent to Apple... Apple is working very hard here to not know anything about its users.

https://techcrunch.com/2018/06/29/apple-is-rebuilding-maps-f...

Re:Apple Pulls Encrypted iCloud Security Feature in UK by acka on Friday February 21, 2025 @10:13PM (#43135734)
Google or Apple could be forced by authorities to perform correlation on the map tiles being requested by users under investigation. Not as accurate as GPS coordinates but probably useful nonetheless.

One more reason to prefer offline maps for those who value privacy.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by GeekyBear on Saturday February 22, 2025 @02:10AM (#43136826)
Given that you can browse map data for any location, not just where you happen to be, I'm betting that triangulation data from your carrier would be more accurate.
Re:Apple Pulls Encrypted iCloud Security Feature in UK by acka on Saturday February 22, 2025 @03:45AM (#43137322)
Sure, triangulation of carrier signals could lead to more accurate position estimates, but if the carrier isn't based in the US they are under no obligation to make this data available to US authorities.

Apple and Google are based in the US so are bound by the CLOUD Act to provide any and all data they have, no matter where in the world it is being collected or stored.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by Gatorguy on Friday February 21, 2025 @11:27PM (#43136110)
Small correction.

Google had "created a system where they don't have access to your data on their servers" a couple of years BEFORE Apple. Android 10 introduced it in 2019.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by GeekyBear on Saturday February 22, 2025 @02:04AM (#43136785)
Google didn't announce plans to stop storing a copy of user location data on their servers until the middle of last year.

See the story linked above.

They didn't announce that they could no longer access user location data on their servers to respond to geofence warrants until the last quarter of 2024.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by Gatorguy on Saturday February 22, 2025 @07:55AM (#43138602)
We're talking iCloud and data encryption compared to Google's Android Cloud E2EE, and you're doing maps.
Re:Apple Pulls Encrypted iCloud Security Feature in UK by GeekyBear on Saturday February 22, 2025 @03:08PM (#43142679)
Were talking about protecting your personal data from government overreach, and Google's entire business model is to collect as much of your personal data as possible and store it on their servers to make ad sales more profitable.

Apple does its best not to collect personal data in the first place.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by spankalee on Friday February 21, 2025 @12:58PM (#43130697)
> all the data about me that is stored in the US is easily accessible without a warrant

No, law enforcement needs a warrant to legally access any data. This is why Prism was illegal, and why companies like Google are pushing back against overly broad geofence search warrants.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by fdb345 on Friday February 21, 2025 @01:30PM (#43131119)
All Encrochat evidence was illegal in at least three different ways. UK Law enforcement didn't care. They just lied.
Re:Apple Pulls Encrypted iCloud Security Feature in UK by multjoy on Friday February 21, 2025 @02:21PM (#43131734)
No it wasn't.

The Dutch cracked and wiretapped it. It has been held not to be intercept evidence per RIPA so capable of being used in evidence.

Most went guilty because they caught red-handed in the most egregious criminality you've seen.

Encro was designed to enable and protect criminal communications. It had no redeeming public value.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by fdb345 on Saturday February 22, 2025 @05:40AM (#43137838)
LOL you can't even get the countries involved right you muppet. Obviously a deluded pig or a pig lacky.

Encrochat was illegal in at least 3 ways to UK and European law. The intercept evidence per RIPA was the lie. The data was not at rest. The British Police and courts are criminals and liars.

Re:Apple Pulls Encrypted iCloud Security Feature in UK by alt227 on Friday February 21, 2025 @01:12PM (#43130885)
> This is why Prism was illegal

Yet it still existed, and was used for surveillance by 3 letter agencies. Why do you think this is any different?

Re:Apple Pulls Encrypted iCloud Security Feature in UK by somenameforme on Friday February 21, 2025 @01:27PM (#43131064)
No idea why the two of you are using past tense. PRISM is still very much alive and well.