Apple Removes iCloud E2EE in UK: What You Need to Know

2 years ago by ExtremeDullard to c/privacy

Apple has removed Advanced Data Protection (ADP) due to a request to backdoor their encryption. Apple has pulled the feature and no longer is offering ADP in the UK. I will discuss this attack on e...
ToadOfHypnosis 23 points 2 years ago
path: 0 15245718, hotness: undefined, score: 23, children: 4
toastal 6 points 2 years ago

Always was 🔫🧑‍🚀

path: 0 15245718 15265102, hotness: undefined, score: 6, children: 0
Slax 2 points 2 years ago

Will the government stop or enforce other laws that prevent individuals from encrypting their own storage?

path: 0 15245718 15264918, hotness: undefined, score: 2, children: 1
ToadOfHypnosis 3 points 2 years ago
path: 0 15245718 15264918 15265001, hotness: undefined, score: 3, children: 0
Nursery2787 1 point 2 years ago
path: 0 15245718 15265516, hotness: undefined, score: 1, children: 0
pylapp 6 points 2 years ago

Any ideas for E2E encrypted storage alternatives?

path: 0 15245592, hotness: undefined, score: 6, children: 7
rinze 13 points 2 years ago

Use whatever cloud provider + encryption on your side. That way you don't have to trust them.

I use pCloud (based in Switzerland) and what I sync is a Cryptomator vault. You have other options, such as VeraCrypt, etc.

path: 0 15245592 15245739, hotness: undefined, score: 13, children: 2
Evotech 1 point 2 years ago

Same, I do this with documents only though.

path: 0 15245592 15245739 15247531, hotness: undefined, score: 1, children: 1
rinze 1 point 2 years ago

I was doing this with documents only when I was using Veracrypt, which forces you to have a fixed volume size and I had to pick and choose what to put inside. When I discovered Cryptomator, which uses a directory and can grow as much as needed, I decided that there was no need to think about what I should encrypt and what not: let's just put everything inside that folder and be done with it.

path: 0 15245592 15245739 15247531 15263046, hotness: undefined, score: 1, children: 0
Dima 7 points 2 years ago

You could use rclone with any service it supports as encrypted cloud storage by using its crypt feature. More technical to set up though than just installing an app.

path: 0 15245592 15246568, hotness: undefined, score: 7, children: 0
andrew0 4 points 2 years ago

Proton offers a Drive, and they're based in Switzerland. I don't see them being strong-armed like this by the UK government any time soon.

path: 0 15245592 15245620, hotness: undefined, score: 4, children: 2
IDKWhatUsernametoPutHereLolol 4 points 2 years ago
path: 0 15245592 15245620 15248865, hotness: undefined, score: 4, children: 1
andrew0 5 points 2 years ago

I also had to upload 2000 photos. The issue was that they had to encrypt each, which took me like 2 days with it running in the background 😅 It could have also been due to my phone being quite old. I don't rely on it that much, other than using it as an off-site back-up for my most important documents.

I do agree that the best choice is a self-hosted solution with proper security, but sadly not everyone has the time or the skills to manage that. The Proton CEO thing also annoyed me, but the Proton Foundation as a whole has good opinions about privacy (e.g., against chat control proposal in the EU). However, next time a slip like this happens from them, I'll probably have had enough time to move my stuff to a local deployment.

path: 0 15245592 15245620 15248865 15251193, hotness: undefined, score: 5, children: 0
IDKWhatUsernametoPutHereLolol 6 points 2 years ago
path: 0 15248808, hotness: undefined, score: 6, children: 2
ExtremeDullard 10 points 2 years ago

Yeah but China ain't a democracy and Apple has their stuff manufactured in China. So you'd expect them to bend over backward to comply there.

The UK on the other hand is nominally a democracy, and Apple has no vital need to keep the UK powers that be happy. Apple could very well decide to tell them to pound sand and pull out of the country for the sake of principles, and I guarantee you the UK would quickly back down.

If Apple hadn't complied in the UK, they would have lost a bit of profits for a while, but gained a ton of good will and credibility. They chose profits. Because corporation.

Incidentally, this whole thing should tell you how much of a democracy the UK really is.

path: 0 15248808 15248907, hotness: undefined, score: 10, children: 1
leraje 11 points 2 years ago

I'm not a fan of Apple at all but they could've done a lot worse. They've basically refused to backdoor encryption and instead announced (as opposed to silently doing it) its removal instead.

I think what we should be more concerned about here is the total silence from other companies who offer encrypted cloud services. Might that imply they've already (as per the terms of the UK's edict) silently complied?

path: 0 15248808 15248907 15250058, hotness: undefined, score: 11, children: 0
EngineerGaming 3 points 2 years ago
path: 0 15265526, hotness: undefined, score: 3, children: 0
privacy
privacy

@lemmy.ml

login for more options
51379
5284
5221

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
  • Don't promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

go to feed...