Remix.run Logo
▲ kqp 4 hours ago

Others have already pointed out that your assumption of Apple TV not spying on you is wrong, I’d like to make a meta-comment on that.

Apple regards privacy as a feature, and I mean that precisely: some places they implement it, other places they decide it’s not worth it, and they only ever tell you about the former. A good example is iMessage: everybody in tech knows it’s E2EE, many fewer realize that the other three copies of your iMessage data on Apple’s servers are just, uh, not encrypted.

You can’t have the same intuition for Apple and privacy that you would for a group like Signal. You need to instead ask yourself whether you fully understand what you need, then whether Apple has guaranteed precisely and fully that, without weasel words.

▲slashdave 36 minutes ago | parent | next [-]

> other three copies of your iMessage data on Apple’s servers are just, uh, not encrypted

Because they want to allow people to recover them.

▲Terretta 3 hours ago | parent | prev [-]

> many fewer realize that the other three copies of your iMessage data on Apple’s servers are just, uh, not encrypted

With Advanced Data Security enabled?

Of course, then there's the persons you're talking to. I figure they are one of your "other three", another is the iCloud copy (deduped from backups) ostensibly resolved by advanced data security, what's the third?

▲kqp 3 hours ago | parent | next [-]

I was thinking of push notification data and skipping several other significant partial leaks. After a little research, I think I overstated the push data leak, though it’s still significant. Anyway, framing it as copies was a rough approximation, the issue is many high probability partial copies resulting in virtual certainty of unencrypted access to any desired data.

iMessage leaks I know about:

- iCloud backups. While I appreciate Advanced Data Protection, I still count this because it’s not available everywhere, most people have it off, and most people with it off are unaware of it backdooring the E2EE marketing they still saw.

- Recipients’ copies, and all the ways their copies get copied. Yes, tricky to address, that’s the comment. While no app can guarantee no unencrypted recipient copies, privacy focused apps do make it not happen unintentionally and by default.

- APN leaks the timestamp, sender, and recipient of every message. Especially powerful in combination with recipient copies.

- Apple controls the key directory and can MITM at will. As usual, see Signal for a high profile attempt at a centralized key directory that’s resistant to controller abuse.

- Contacts, Siri, and Apple Intelligence all ingest then upload iMessage data.

- No source code or reproducible builds. Obvious reasons, still a real hole.

▲zchrykng 3 hours ago | parent | prev | next [-]

The other person's iCloud backup I assume.

Avanced Data Security keeps your copy in iCloud safe, but doesn't help with the people you are messaging's copy.

▲gambiting 3 hours ago | parent | prev [-]

If you live in the UK you can't enable ADS at all, apple cares about your privacy but not enough to piss off the UK government it seems.