News for hackers. Stuff that matters.
Re:Apple Is on Defense at WWDC by bigyabai on Sunday June 08, 2025 @11:40AM (#44217625)
Nobody understands or believes Apple's stance either. All they'll do is give us whitepapers on how things should work, which we know has been fabricated at least once in the case of Push Notification backdoors: https://arstechnica.com/tech-policy/2023/12/apple-admits-to-...

This isn't a no-true-scotsman attitude. This is a rational reaction to security theater when nobody can prove that Apple is doing what they claim to be doing.

Re:Apple Is on Defense at WWDC by dagmx on Sunday June 08, 2025 @12:03PM (#44217786)
Could you point to the white paper that would apply to notifications privacy? I can’t seem to find anything claiming notifications are encrypted, often the opposite.
Re:Apple Is on Defense at WWDC by bigyabai on Sunday June 08, 2025 @02:29PM (#44218706)
You're putting words in my mouth. I never said they were encrypted. I said that Apple deliberately misled developers about the surveillance functionality by pushing whitepapers that do not accurately describe how these systems work. This prevents developers from protecting their users and creates confusion around how Apple services operate.

Even if it was E2EE - trusting Apple with proprietary crypto is like trusting Microsoft to not backdoor Bitlocker. It requires a specifically-qualified moron who doesn't respond to technical arguments and only understands marketing language.

Re:Apple Is on Defense at WWDC by dagmx on Sunday June 08, 2025 @02:31PM (#44218718)
Your literal words are

> All they'll do is give us whitepapers on how things should work, which we know has been fabricated at least once in the case of Push Notification backdoors

I’m asking for evidence of your own claim. Apple do not claim that everything is encrypted, they specifically call out various aspects as being unencrypted.

[dead]
Re:Apple Is on Defense at WWDC by dagmx on Sunday June 08, 2025 @02:52PM (#44218848)
Okay so you literally can’t point to the fabrication and can’t make a cognizant argument without denigrating the other persons questions or argument. Have a nice day raging into the wind.
Re:Apple Is on Defense at WWDC by Spooky23 on Sunday June 08, 2025 @05:34PM (#44219625)
Respectfully, I think you’re drawing an incorrect inference.

They don’t exhaustively list all risks and perils, but that risk was known to me personally and documented by Apple at least circa 2020 — I worked with some third party developers to provide options to keep potentially high risk data out of APNS messages. Similar risks exist for Google’s platform. I’m not some genius with access to arcane knowledge, but if you’re doing your job it’s part of your risk assessment.

Judging by your very technical closing comment, this has no weight on your opinion, but I appreciate your taking time away from auditing Veracrypt or LUKS to read this.

Re:Apple Is on Defense at WWDC by kalleboo on Sunday June 08, 2025 @10:59PM (#44221101)
Yeah I'm just a lowly indie iOS app developer but I remember way back in iOS 10 when Push Notification Service Extensions were introduced and one of the examples used (indeed, in the current documentation as well) was to be able to have the contents of push notifications be encrypted over apns and decrypted on-device.