Apple's Beats brand in April unveiled the Powerbeats Pro, a redesigned wire-free version of its popular fitness-oriented Powerbeats earbuds.
iCloud Backups Not as Secure as iOS Devices to Make Restoring Data Easier
Apple's ongoing fight with the FBI over whether the company can be compelled to help the government unlock the iPhone 5c used by San Bernardino shooter Syed Farook has brought the full range of Apple's privacy policies into the spotlight.
The details surrounding the case have made it clear that while Apple is unable to access information on iOS devices, the same is not true of iCloud backups. Apple can decrypt an iCloud backup and provide the information to authorities when ordered to do so via a warrant, as it did in the San Bernardino case.
In a piece posted on The Verge entitled "The iCloud Loophole," Walt Mossberg takes a look at Apple's iCloud backups and explains the reason why iCloud data can't be made as secure as data stored solely on an iPhone or iPad.
Apple is able to decrypt "most" of the data included in an iCloud backup, and an Apple official told Mossberg that's because the company views privacy and security issues differently between physical devices that can be lost and iCloud. With iCloud, it needs to be accessible by Apple so it can be used for restoring data.
However, in the case of iCloud, while security must also be strong, Apple says it must leave itself the ability to help the user restore their data, since that's a key purpose of the service. This difference also helps dictate Apple's response to law enforcement requests. The company's position is that it will provide whatever relevant information it has to government agencies with proper, legal requests. However, it says, it doesn't have the information needed to open a passcode-protected iPhone, so it has nothing to give. In the case of iCloud backups, however, it can access the information, so it can comply.iCloud backups contain iMessages and texts, content purchase history, photos and videos, device settings, app data, voicemail password, and health data. Backups don't include information that's easily downloadable, such as emails from servers or apps, and while iCloud backup does encompass iCloud keychain, Wi-Fi passwords, and passwords for third-party services, that information is encrypted in a way that makes it inaccessible to Apple.
Mossberg suggests customers who don't want to upload data to Apple via an iCloud backup make local encrypted backups through iTunes using a Mac or PC, and he points out that other cloud storage services, like Dropbox, are no more secure.
Mossberg's full exploration of iCloud is available over at The Verge and is well worth reading for anyone interested in the security of data stored in the cloud.
Tags: theverge.com, iCloud Guide
[ 114 comments ]
Top Rated Comments
(View all)
44 months ago
Technically Apple could absolutely offer a cloud backup solution where even they couldn't access the data. For example, they could let the user pick a backup password (same as they already do for encrypted iTunes backup) and use it to encrypt the data before uploading to iCloud. Of course this means that users who forget the password couldn't restore their backup, which is why they should probably make this optional and give the user a proper warning. And, BTW, there are cloud services that use similar approaches to encrypt their users' data, e.g. Spideroak and the backup service Crashplan.
44 months ago
Now everyone will want a 1TB iPhone, since they won't want to be backing up all that secure stuff they own to the iCloud.
1TB hard drives are very inexpensive nowadays. Unless you don't have access to a computer, backing your iPhone up to an encrypted drive or two or three, storing one in a bank vault, you're more secure than backing up to any cloud.
44 months ago
I guessed that already, but now it's a fact on public record. The only 'safe' solution is to delete all our iCloud backups data, and not use any iCloud services.
But here is the problem! Apple is increasingly integrating iCloud services deep into its iOS and Mac OS X. It's almost impossible to use Apple products without iCloud. This is scary... :eek:
We're all already trapped deep in total surveillance by the NSA and god knows by whom else. The orwellian society is real! :(
I feel like a chimp sitting in a zoo while constantly being watched. Welcome to the 21st century's privacy striptease.
The only way out of our modern tech zoo is going low-tech and to move to an isolated island, dig a cave there (beware spy satellites), and hide there forever.
But here is the problem! Apple is increasingly integrating iCloud services deep into its iOS and Mac OS X. It's almost impossible to use Apple products without iCloud. This is scary... :eek:
We're all already trapped deep in total surveillance by the NSA and god knows by whom else. The orwellian society is real! :(
I feel like a chimp sitting in a zoo while constantly being watched. Welcome to the 21st century's privacy striptease.
The only way out of our modern tech zoo is going low-tech and to move to an isolated island, dig a cave there (beware spy satellites), and hide there forever.
44 months ago
Technically Apple could absolutely offer a cloud backup solution where even they couldn't access the data. For example, they could let the user pick a backup password (same as they already do for encrypted iTunes backup) and use it to encrypt the data before uploading to iCloud. Of course this means that users who forget the password couldn't restore their backup, which is why they should probably make this optional and give the user a proper warning. And, BTW, there are cloud services that use similar approaches to encrypt their users' data, e.g. Spideroak and the backup service Crashplan.
Wouldn't Apple would have to store enencryption keys in the cloud though to make it work on a different device than the original phone?
44 months ago
Now everyone will want a 1TB iPhone, since they won't want to be backing up all that secure stuff they own to the iCloud.
44 months ago
So this really proves that the FBI is 100% full of **** on the San Bernadino case. They know full well they can just subpoena the iCloud backup and be done with it, they just want an easy way into phones so they can subvert due process.
They already got the iCloud back ups. But there were no backups a month from the event. They want to get into the phone to get more recent data.
44 months ago
I have been backing up to both my Mac through iTunes and iCloud. I wonder if I cancel my iCloud subscription my iCloud backups will just disappear ??
No they won't. Your access to them will, but Apple keeps multiple realtime backup locations and authorities would be able to subpoena those records. Going forward, new data won't be backed up.
Although, given the spotlight on this issue, there's now the distinct possibility of silent backups for law enforcement, until the next Snowden-type revelations.
44 months ago
No mention of iCloud email security here -- are we to assume Apple, like Google, will turn over iCloud email with a warrant?
Yes they will. Everything that you can access on icloud.com is technically accessible to Apple too (since they have to be able to decrypt it on their end in order to display it on the web site) and thus potentially subject to a warrant.
[ Read All Comments ]
Twelve South today launched a new product called the "StayGo," which is a portable hub that connects to USB-C MacBooks and MacBook Pros.
Note: MacRumors is an affiliate partner with...
The team behind Pixelmator Pro today released a major update for the photo editing app, introducing useful new capabilities that make it easier than ever to edit your photos.
There's now a...
Television maker LG says that updates will soon arrive that make HomeKit and AirPlay 2 available on supported TVs.
LG's Australian support account on Twitter responded to a customer query...
Alongside the launch of iOS 12.4, Apple today released new versions of iOS 9.3.6 and iOS 10.3.4 for older iPhones and iPads that aren't able to run iOS 12.4.
The iOS 9.3.6 update is...
Alongside the release of iOS 12.4 with its new data migration tools for iOS devices, Apple today released a new 12.4 software update designed for the HomePod.
The new HomePod software will be...
Apple today released macOS Mojave 10.14.6, the sixth update to the macOS Mojave operating system that first launched in September. macOS Mojave 10.14.6 comes over a month after the release of macOS...
Apple today released tvOS 12.4, the eighth update to the tvOS 12 operating system that runs on the fourth and fifth-generation Apple TV models. tvOS 12.4 comes more than a month after the release of...
Apple is reportedly in advanced talks with Taiwanese display manufacturers to use microLED displays in its products as soon as next year, according to a new report.
Citing sources with...
