If Apple complies with this, the UK government will gain access to all iCloud data globally. The only way Apple comes out of this with any integrity is to leave the UK market. If they give in to this,
If Apple complies with this, the UK government will gain access to all iCloud data globally. The only way Apple comes out of this with any integrity is to leave the UK market. If they give in to this, every regime in the world will demand the same thing. And that’s before we even get to the fact that there’s no such thing a “backdoor” for just so-and-so. Either there is a door or there isn’t and if there is, anyone who obtains the key can use it.
@[email protected] TBH the leak is the problem. If Apple could make credible in private that they would leave the UK market, the government could back down, in private.
That's just how diplomacy works. This isn't regulation but international relations between states.
But now it is public, neither side can back down without serious consequences.
@[email protected] I don't think Apple can even comply with this sort of request. They have never wavered on this and in fact have continued to make it even progressively more difficult with every major and even minor releases. One of my iCloud accounts (I created one for my former employer) is entirely self-managed via u2f/fido2 tokens, it doesn't use Apple's MFA at all, and i disable imessage in the cloud so they're not decrypted there. now what, guvner?
nothing stops them from doing police work does it?
@[email protected] They already capitulated to China by storing iCloud data locally. I’m pretty sure China didn’t ask for that because they wanted data they couldn’t read stored closer to home.
@[email protected] do you believe that china can gain unauthorized access to iCloud account data without cooperation or the user providing their credentials? i thought they could use fido2 keys in china?
@[email protected] data governance and sovereignty requirements for businesses or orgs isn't unusual, in higher ed for example you need to store data in the US; china probably has a ton of requirements like that. google has been doing it almost as long as yahoo i think.
@[email protected] The main problem is that they can do it. Encryption keys should be hosted and managed by the client or it can't be and shouldn't be trusted. Of course, that requires user ownership of the client device, which is a big NO-NO for apple.
They will huff and puff about the UK demand and make a great show of protecting privacy etc
But as soon as the US govt demands the same ( maybe already have?) , Apple will have a serious weighing up of costs/ benefits to apple, not customers and conclude that maybe they care more about the US govt than about their customers
@[email protected] I'm willing to bet that it was another five eyes partner, like the US, who damanded the UK request this since we, shockingly, have the legal framework in place for it. I was really hoping that this new government would repeal this god awful law. I guess that is not happening now...
@[email protected] I don't get this. If Apple can provide this, it wasn't encrypted to begin with and they are likely already giving the info and this is just a PR campaign to adjust the public's expectations about these things.
If that cannot provide this, because it is encrypted with a key only the consumer can provide, then it's a moot point.
Il faut impérativement maîtriser soi-même le processus de cryptage de A jusqu'à Z et ne pas laisser faire cela par aucun prestataire de services.
De cette façon il n'y a jamais de nécessité de backdoor.
On prend un algorithme public, tel que Aescrypt, on en prend une implémentation indépendante de tout service web, et on est le seul à connaître la clef.
Le secret doit résider dans la clef et non dans l'algorithme.
@[email protected] Given the public nature of the order from UKGov to Apple, I suspect this will mean criminals won't put their data on the platform and find other companies. Well, unless they are dumb ones like Trump.