Apple refuses to break encryption, seeks reversal of UK demand for backdoor - Ars Technica
Apple appeal to Investigatory Powers Tribunal may be the first case of its type.
You're viewing part of a thread.
What does your behavior have to do with whether or not the encryption is broken?
Social media doesn't do nuance.
No encryption was broken.
Broken would imply that Apple has the ability to decrypt stored user data using advanced data protection. This is not the case.
Selling you a box to put your stuff in and selling someone else a locked box to put their stuff in doesn't mean Apple broke into your box. It means your big brother won't let you have locks.
Broken would imply that Apple has the ability to decrypt stored user data using advanced data protection.
...is that not what they're doing?
No.
They disabled the ability for new users to use ADP.
If you use ADP, only you have the encryption keys. The UK wants Apple to keep a copy of the decryption keys.
There is nothing that can be done to data that is already protected by ADP. At worst Apple can delete it, or turn over encrypted data but there is nothing that is likely to exist in the next 100 years that can break the encryption (even hypothetical quantum computers).
As an interesting side note, if you use Windows and use Bitlocker to encrypt your hard drives while logged into a Microsoft account then Microsoft backs up your recovery key "for your convenience". They've produced these recovery keys for subpoenas.
That is what the UK wants Apple to do.
They disabled the ability for new users to use ADP.
So existing users can continue using ADP?
Yes, for the moment.
"Apple can no longer offer Advanced Data Protection (ADP) in the United Kingdom to new users and current UK users will eventually need to disable this security feature,"
It'll eventually be completely removed, but they seem to have some time to be in compliance and so they'll give their customers time to move before it's all deleted.
Lemmy is not encrypted, my comments are public, your comments are public, we both know that. Anyone with a raspberry pi or an old netbook can scrape them.
If I use an encrypted service and all of a sudden everything that I thought was encrypted was decrypted by the service provider without my consent? That's breaking encryption.
If on the other hand I use an encrypted service and they tell me that they can no longer offer the service, my data will be destroyed after X days, and I need to find another way of storing my encrypted data because of privacy invading government policies? That is not breaking encryption.
tell me that they can no longer offer the service, my data will be destroyed after X days, and I need to find another way of storing my encrypted data
Oh that makes much more sense.
