Hacker News new | ask | show | jobs
by sneak 1242 days ago
A reminder that iCloud Photos is not end to end encrypted, and that both Apple and the US federal police (FBI et al) have warrantless access to the contents of iCloud, so you are creating a huge trove of data that could be misused against you by police at any point in the future should it be politically expedient to do so. Screenshots frequently contain all sorts of extremely sensitive information.

This may not be part of your threat model, but it should at least be known by people so they can evaluate the risk themselves.
1 comments
brandon272 1242 days ago
From Dec 7, 2022:

https://www.macrumors.com/2022/12/07/apple-advanced-data-pro...

link
sneak 1242 days ago
Approximately nobody has this turned on.

It's opt-in, so approximately nobody ever will.

Everyone you iMessage with will still be putting all of your conversations and attachments and iCloud message sync keys into non-e2ee backups from their end, so turning this on won't accomplish much even if you know about it.

link
marcellus23 1241 days ago
> Approximately nobody has this turned on.

It doesn't matter as long as the person storing screenshots in iCloud turns it on.

> Everyone you iMessage with will still be putting all of your conversations and attachments and iCloud message sync keys into non-e2ee backups from their end

Weren't we talking about storing screenshots in iCloud photos?

link
BlueTemplar 1242 days ago
Tomorrow it might become opt-out.

But I still wouldn't trust Apple 100% : we know that they were among the companies silently cooperating with the NSA, and the potential for backdoors in their software isn't nil. (Whether you should consider this as a real threat depends on your circumstances of course.)

link