Apple Ordered by UK to Create Global iCloud Encryption Backdoor
Apple Ordered by UK to Create Global iCloud Encryption Backdoor
The British government has secretly demanded that Apple give it blanket access to all encrypted user content uploaded to the cloud, reports The...
I dont know how you say: “This is fucking scary” in British English, but in Canadian English, I’d say it like: “This is fucking scary”.
"Propah froitnen innit" is a loose translation
It's scary in that they don't understand why that's a bad idea, but it's kind of stupid in that Apple probably can't, if Apple implemented E2EE at all correctly.
Assuming that's true, they can demand all they want, but you can't just:
if government_order == true: iCloud.unlock()...assuming they use any of the usual encryption algorithms.
What is interesting is that they've ordered Apple to do it but (maybe) not Google, which has a much larger share of Android users in Europe. Is the UK iOS-heavy?
Assuming that’s true, they can demand all they want, but you can’t just:
if government_order == true: iCloud.unlock()…assuming they use any of the usual encryption algorithms.
Proton services are encrypted, but if Andy Yen goes full nazi (which he haven't done yet), he could just send you a javascript on the browser UI / update the apps, with code that extracts your keys and sent it over to their servers.
And they could force the update by refusing you to access your data until you've updated.
Lil Americans speaking American! We gonna save you!
If encryption can be backdoored, then it was never encrypted anyway.
I mean, it could be.
Proton services are encrypted, but all that they have to do to "backdoor" it is just sending you a javascript to your browser / update your app with code that would extract your keys and sent it over to them.
The encryption was not "backdoored", they just retroacrively backdoored it.
They could even hold your data hostage until you update the apps.
Yes, i talked about this in another comment (off this acc tho) that you can't perfectly trust anything. Not even free software, so you have to cross your fingers and hope they are truly private and secure.
Self hosting is the best private and secure way to store files.
This is why FOSS is so important. Then you can at least control the app and know that it's not being updated with malicious code.
Encoded would be the proper term then.
Yep. What's the point of trusting "encoded" sensitive content that can be cracked at a whim by the company?
It's times like these where self hosting is a blessing.
For those of you not in the UK, or unfamiliar, its important to understand just how intrusive the gvmt are in terms of privacy and how intrusive they want to be. We are world leaders in gvmt led privacy oppression.