elijahg

About

Username
elijahg
Joined
Visits
398
Last Active
Roles
member
Points
6,585
Badges
2
Posts
2,909
  • Apple drops new Safari bookmark end-to-end encryption

    This doesn’t really make a difference anyway, because the unencrypted backups stored on Apple’s servers contain near enough everything from your phone. As long as syncing is encrypted between phone and Apple’s servers, a man in the middle attack can’t happen - though that doesn’t stop Apple reading whatever data it wants from those decrypted-upon-arrival backups on their servers. Third party services on iOS actually have better encryption because they can encrypt their databases with the iOS Secure Enclave key, and Apple has no way (that we know of) of obtaining that key. So even with unencrypted backups all Apple has is illegible gobbledegook in third party databases without the Secure Enclave key. 

    If Apple was truly serious about privacy of user data they hold, they’d implement P2P syncing over something like Bluetooth/Ad-Hoc wifi (perhaps using Airdrop APIs). The data would never hit Apple’s servers, and the FBI or whoever wouldn’t be able to subpoena Apple for it, as they wouldn’t ever be in possession of it. Basically the same as the old iTunes syncing just less… crap. 
    ken burns effect
  • Apple patched an iOS lock screen bypass without crediting its discovery

    Well that confirms at least one of the problems with Apple's bug bounty program: Apple Sherlocked an exploit. Whowouldathunkit?
    lkruppdarkvader
  • Italian regulator says Apple's iCloud terms are unreasonable, may be illegal

    ApplePoor said:
    Guess what? If you don't like the terms of use, do NOT sign up.

    I'm so tired of the nanny state removing the responsibility from the user, who voluntarily signed up, for the user's poor decision making process. Read the agreement before joining. It is actually that simple.
    So you read the entire 10,000 word T&C's before you signed up? Of course you did. Also, putting something in T&Cs doesn't override the law and make it legal, even if someone agrees to it.
    Oferlam92103xyzzy01gatorguymuthuk_vanalingamkillroy
  • Apple keeps making third-party screen repairs harder

    ...I remember another prominent valley company touting 'we are not evil'...?
    Might disabling face recognition actually be desirable from a privacy perspective ?
    Might a 3rd party repair compromise the authenticity (value) of any 'waste' data that might survive on Apple servers or web tracking ?
    Let the flames begin...
    The FaceID module is completely electrically separate to the display pre-iPhone 13. A display swap doesn't disable FaceID as long as you transfer the speaker assembly, which has nothing to do with FaceID, but Apple apparently uses it to authenticate the display pre-13. The authentication now seems to be the display itself, presumably because people found out Apple's scam could be worked around by swapping the speaker assembly.

    This is nothing to do with privacy. Apple disables TrueTone on non-Apple displays too (though this has been cracked as usual by the Chinese), and there're zero privacy implications with TrueTone. It's just yet another way Cook is trying to extract extra profit from customers, but puts another bullet in the chamber for right to repair proponents; Apple seems to be clamouring unnecessarily for government scrutiny lately. Also, isn't it odd how Apple claims to be so "green" but makes repairs so expensive it's barely worth it? Right to repair can't come soon enough.
    MplsPlkrupp80s_Apple_Guymuthuk_vanalingam
  • Unlock with Apple Watch isn't working for some iPhone 13 owners

    fred1 said:
    Did they all turn on “Unlock with Apple Watch” under “Face ID & Passcode” in Settings?

    I wish it weren’t necessary to have WiFi turned on as well to make this work. Isn’t Bluetooth enough?
    No, because it uses wifi time-of-flight to work out how far you are from the Mac.
    caladanianfred1