4 ms·

I think you are confusing several different aspects of security and privacy here, like iCloud data backups and encrypted local iPhone storage. Apple does have a

I think you are confusing several different aspects of security and privacy here, like iCloud data backups and encrypted local iPhone storage. Apple does have access to iCloud data, but they do not and cannot have access to locally encrypted stuff which is locked behind your personal PIN code. Apple does share iCloud data with law enforcement. Knowing this allows users to improve their protection and privacy at the cost of convenience. For instance, one can avoid using iCloud altogether, or choose to encrypt iCloud backups.

thefz 3y ago
There is history of secret agencies infiltrating the supply chain to implant malware on a whole batch of devices in hope of catching a single person, with the silent endorsement of Apple of course. Their security is just like everyone else
- theshrike79 3y ago
  You don't waste supply chain level attacks on regular joes. Apple devices get so much attention that the risk of tainting huge batches of devices at the supply chain level and having one of those end up in the hands of a security researcher is too big. All of the security professionals I know use iPhones just because it's really fucking hard to get anything out of them without resorting to rubber-hose crypto, which is illegal in most of the world. The last iOS zero-day was burned on no other than Jeff Bezos. Joe Schmoe is perfectly safe, the local PD won't have access to tooling like that.
- greyface- 3y ago
  Do you have a source for this? I remember the Snowden leaks showed this occurs with individual target devices via the NSA's "Tailored Access Operations" unit,[1] but I haven't seen anything suggesting it's been done to batches of devices that include non-targets. [1]: https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa...

thefz 3y ago

There is history of secret agencies infiltrating the supply chain to implant malware on a whole batch of devices in hope of catching a single person, with the silent endorsement of Apple of course. Their security is just like everyone else

theshrike79 3y ago
You don't waste supply chain level attacks on regular joes. Apple devices get so much attention that the risk of tainting huge batches of devices at the supply chain level and having one of those end up in the hands of a security researcher is too big. All of the security professionals I know use iPhones just because it's really fucking hard to get anything out of them without resorting to rubber-hose crypto, which is illegal in most of the world. The last iOS zero-day was burned on no other than Jeff Bezos. Joe Schmoe is perfectly safe, the local PD won't have access to tooling like that.
greyface- 3y ago
Do you have a source for this? I remember the Snowden leaks showed this occurs with individual target devices via the NSA's "Tailored Access Operations" unit,[1] but I haven't seen anything suggesting it's been done to batches of devices that include non-targets. [1]: https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa...