Hacker News new | ask | show | jobs
by oarsinsync 1769 days ago
> the user's iCloud [edit: photos, not all of iCloud] is encrypted at rest against Apple accessing it.

This is false. They present a web interface showing the photos. The UI isn’t locally generated entirely using JavaScript to decrypt the data. They only way this can happen is if Apple has the decryption keys.

iCloud Photo Library has never been private. Apple has always been able to view your photos.

2 comments

You are correct; I was misinformed.

https://9to5mac.com/2021/08/05/report-apple-photos-casm-cont...

Apple has the keys; the data is encrypted at rest and in transit, but they can be compelled to use them.

I worked at Apple on iCloud and yes, photos were never encrypted. Or should I say blade runner. :))