iCloud Uploads Local Data Outside of iCloud Drive

Re:iCloud Uploads Local Data Outside of iCloud Drive by xenadu02 on Sunday October 26, 2014 @10:28AM (#8511095)

Apple is not a "PRISM" partner; I thought we all agreed that this was when the NSA discovered goto fail and/or some jailbreak exploits.

[ Parent | on HN ]

Re:iCloud Uploads Local Data Outside of iCloud Drive by sneak on Sunday October 26, 2014 @10:30AM (#8511103)

The Washington Post documents claim otherwise:

http://www.washingtonpost.com/wp-srv/special/politics/prism-...

[ Parent | on HN ]

Re:iCloud Uploads Local Data Outside of iCloud Drive by Anechoic on Sunday October 26, 2014 @11:28AM (#8511297)

That link doesn't contradict xenadu02's claim. Do you have a link that better spells out that Apple is a willing partner in PRISM?

[ Parent | on HN ]

Re:iCloud Uploads Local Data Outside of iCloud Drive by sneak on Sunday October 26, 2014 @03:01PM (#8511910)

I doubt any of the companies are willing partners in PRISM - it's terribly bad for business, as Americans are only 4% of humans and being forced on threat of personal imprisonment to spy for the American government is not a really wise customer acquisition strategy.

It is really quite likely that the access to Apple and Google and other large providers' systems is done at an operations level, without knowledge of their management and providing for complete plausible deniability. How many network admins and ops people at Apple have physical access to the machines where keys are generated, stored, and used?

https://en.wikipedia.org/wiki/Tailored_Access_Operations

The #1 realtime end-to-end encrypted messaging service on the planet (where the software development and cyphertext transmission are both physically present inside the legal jurisdiction of the US) would be your first choice, no?

[ Parent | on HN ]

Re:iCloud Uploads Local Data Outside of iCloud Drive by Anechoic on Sunday October 26, 2014 @03:11PM (#8511942)

I doubt any of the companies are willing partners in PRISM

AFAICT that was xenadu02's point - that data from Apple et al are being collect by PRISM, but Apple is not a "partner" in the sense that "partner" implies cooperation. If intelligence agencies have to steer clear of management, that's not a partnership, that's espionage.

[ Parent | on HN ]

Re:iCloud Uploads Local Data Outside of iCloud Drive by flatdeviant on Sunday October 26, 2014 @05:29PM (#8512524)

Nope. PRISM has do to with "direct access" to Apple's servers. This is according to NSA's own documents, and Apple may either be aware and forced by law to lie (Yahoo-style [0]) or unaware of this (i.e. they got hacked by NSA). Nothing to do with SSL being broken, especially as iCloud didn't run on Apple software but on Azure and AWS back then[1], and therefore iCloud wasn't itself vulnerable to goto fail.

[0]: https://finance.yahoo.com/news/how-the-government-could-have...

[1]: see iOS security white paper from Feb 2014, iCloud was the same back in 2012.

[ Parent | on HN ]

Re:iCloud Uploads Local Data Outside of iCloud Drive by snowwrestler on Monday October 27, 2014 @12:46AM (#8513891)

"Direct access" came from a Washington Post story and it has since been walked back. PRISM is a program operated by the FBI, through which they make FISA court requests of data companies (like Apple) and then share the results with the NSA.

[ Parent | on HN ]

Re:iCloud Uploads Local Data Outside of iCloud Drive by hbbio on Sunday October 26, 2014 @10:45AM (#8511150)

Apple joined PRISM a few months after Steve Jobs death.

[ Parent | on HN ]