Conversation

Notices

1. Embed this notice
   JosephMenn (josephmenn@infosec.exchange)'s status on Saturday, 22-Feb-2025 00:20:42 JST JosephMenn

   Breaking: Apple pulls end-to-end encrypted storage option from UK after secret order for a back door. https://www.washingtonpost.com/technology/2025/02/21/apple-yanks-encrypted-storage-uk-instead-allowing-backdoor-access/

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Saturday, 22-Feb-2025 00:21:11 JST Rich Felker

     in reply to

     @JosephMenn So what happens to people who had it enabled? Do they lose their backups? Or will their devices silently start exfiltrating all their private data to Apple in the clear?

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Saturday, 22-Feb-2025 00:23:13 JST Rich Felker

     in reply to

     @JosephMenn Aside: Folks in UK *and US* with Apple devices should probably consider changing the location they tell Apple they're in to somewhere safer.

     This is unlikely to be easy if you have Apple Pay or paid apps/subscriptions, but if not, it should be fairly easy, I think..?

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Saturday, 22-Feb-2025 00:32:38 JST Rich Felker

     in reply to

     • Reay

     @reay @JosephMenn It shouldn't be needed (but see sister reply next to yours). For example a US iPhone can be taken to China and connected to wifi there and doesn't immediately start blocking your access to apps banned there. Rather there's a jurisdiction associated with your device and Apple account, that can be changed (but that might not be enough).

   • Embed this notice
     Reay (reay@beige.party)'s status on Saturday, 22-Feb-2025 00:32:39 JST Reay

     in reply to

     • Rich Felker

     @dalias @JosephMenn Sincere question that just occurred to me: Would a VPN work for this?

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Saturday, 22-Feb-2025 00:42:33 JST Rich Felker

     in reply to

     • Reay

     @reay @JosephMenn Are there third party backup services for iPhone that are actually e2ee and complete? I was under the impression there was no way for an app to get the permissions to do that and that the only way to do safe backup of iPhone was locally with iTunes.

   • Embed this notice
     Reay (reay@beige.party)'s status on Saturday, 22-Feb-2025 00:42:34 JST Reay

     in reply to

     • Rich Felker

     @dalias @JosephMenn I’m in Canada so not sure this’ll particularly affect me (I also use a third party backup service, so would be less affected than some either way), but I was curious for anyone affected if that would be a usable workaround.

   • Embed this notice
     Benedek Kozma (cyberbeni@techhub.social)'s status on Saturday, 22-Feb-2025 02:02:47 JST Benedek Kozma

     in reply to

     • Rich Felker

     @dalias @JosephMenn They already have GPS based region locking implemented in some cases: https://support.apple.com/en-us/118110#:~:text=You%20can%20continue%20to%20update,to%20manage%20previously%20installed%20apps.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Saturday, 22-Feb-2025 02:02:47 JST Rich Felker

     in reply to

     • Benedek Kozma

     @Cyberbeni @JosephMenn Ooh, so you can sideload from anywhere with just a GPS spoofer?? 😈

     Haelwenn /элвэн/ :triskell: likes this.