Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

iCloud backups are a treasure chest that Apple hands over to law enforcement more easily than people assume. Just backup to your laptop. If there’s a legal need to access your devices, you’ll have the warrant served to you directly.

Also Tresorit offers end to end encrypted cloud storage. If you’re storing a lot of sensitive documents like ID scans, account statements, medical paperwork, it’s worth a consideration. Then if your iCloud storage has to be handed over, at least you maintain some privacy in those matters.



https://support.apple.com/en-us/HT202303

Seems some of iCloud is end-to-end encrypted. These features and their data are transmitted and stored in iCloud using end-to-end encryption:

  * Apple Card transactions
  * Home data
  * Health data
  * iCloud Keychain
  * Maps Favorites, Collections and search history
  * Memoji
  * Payment information
  * QuickType Keyboard learned vocabulary
  * Safari History and iCloud Tabs
  * Screen Time
  * Siri information
  * Wi-Fi passwords
  * W1 and H1 Bluetooth keys
Things that are not e2e: photos, iMessage, Notes, Mail, Contacts, and others.

I'm wondering, are the Safari cookies e2e encrypted?


It's e2e but the key is also backed up in iCloud. Consider one uncomfortable fact: if you lose your iPhone and forget your iCloud password you can still recover your data.


Such a bizarre swiss cheese approach to E2E isn't it?


https://blog.elcomsoft.com/2021/01/apple-scraps-end-to-end-e...

Interestingly apple was planning end to end encryption of backups but changed their minds on the matter.


I’m under the impression this was government influenced. Anytime Apple has increased their encryption talk they are pressured by the feds.


So is the browsing history not e2e encrypted in the backup?


Can / how do you turn of the bluetooth keys? I have keychain turned off already. Does that include wifi passwords or not?


Bluetooth keys refers to headphones only - not bluetooth in general


Thank you!


Wow. Photos are up for grabs but god forbid anyone see your "memoji"...


Because people get pissed if you tell them that since they forgot their password the photos of their kids are gone.


I wonder if the geolocations on photos themselves are the product Apple are being pressured to maintain. A fairly active phone photographer with geolocation on has a good location history up for grabs.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: