Apple’s Commitment to Customer Privacy

Re:Apple’s Commitment to Customer Privacy by chm on Monday June 17, 2013 @11:54PM (#5897415)

"For example, conversations which take place over iMessage and FaceTime are protected by end-to-end encryption so no one but the sender and receiver can see or read them. Apple cannot decrypt that data. Similarly, we do not store data related to customers’ location, Map searches or Siri requests in any identifiable form."

If all of this statement is true, then I'm impressed. I would have thought Apple to keep more information, such as iMessage logs, for the sake of analytics and Ad revenue.

Good.

[ Parent | on HN ]

Re:Apple’s Commitment to Customer Privacy by LoganCale on Tuesday June 18, 2013 @12:15AM (#5897497)

Apple has never made the iMessage protocol publicly available for review, but from reverse engineering people have not been able to find evidence of end-to-end encryption, just SSL/TLS to and from Apple's servers.

> I do not see anything about retrieving public keys of users you are sending messages to; hence your message is completely readable/editable by someone at apple's servers.

http://security.stackexchange.com/questions/18908/the-inner-...

Further, an iMessage message can be received simultaneously on all your devices. Unless your private key is synced via Apple's servers, how would end to end decryption work?

And finally, there were incidents some time back where people were receiving messages intended for other people, but were able to read them unencrypted.

It would be nice to get some clarification from Apple on this, along with making the protocol and its security public.

[ Parent | on HN ]

Re:Apple’s Commitment to Customer Privacy by eigenvector on Tuesday June 18, 2013 @12:20AM (#5897521)

If Apple is using the Obama administration's definition of "can't", then "Apple cannot decrypt that data" simply means, "Apple does not decrypt that data".

[ Parent | on HN ]

Re:Apple’s Commitment to Customer Privacy by foolrush on Tuesday June 18, 2013 @12:13AM (#5897487)

“Apple iMessage users should be aware that regardless of what they heard last week, their messages can be easily obtained by law enforcement pursuant to a warrant under the Electronic Communication Act [ECPA],”

http://www.globalresearch.ca/cell-phone-surveillance-us-law-...

So which one is correct, or does the language permit both to be?

[ Parent | on HN ]

Re:Apple’s Commitment to Customer Privacy by llamataboot on Tuesday June 18, 2013 @12:23AM (#5897530)

or at least search words. I'm surprised Apple hasn't made a bigger deal of it than one sentence at the end of an unsigned statement

[ Parent | on HN ]