dgdfhdfhj
Re:Apple introduces end-to-end encryption for backups
on Wednesday December 07, 2022 @04:05PM (#33900238)
> As it is, my iPhone unlock PIN is everything that's needed to decrypt the data server-side
That's not quite true. They use a HSM on their datacenters, which only allows a limited amount of guesses. They only allow a limited amount of guesses, before your data is wiped forever[1].
[1] https://blog.cryptographyengineering.com/2021/03/25/whats-in...
Re:Apple introduces end-to-end encryption for backups
on Wednesday December 07, 2022 @03:07PM (#33899530)
One must also understand that you're wrong. My threat model isn't Apple. My threat model is
a) Overreaching law enforcement, which want to take a look at what I'm up to. b) Data breach at Apple exposes all my data c) Errors where my pictures gets in another users photo album, as seen on Google Photos once.
E2EE defends against all 3