Hacker News Reader

Comment by newZWhoDis | Hacker News Reader

Wow, Apple enabling E2EE for backup is huge, since before they would bypass iMessage security by including your iMessage keys in the unencrypted cloud backup (so governments could request that copy then watch your messages in real time).

I’m sure they’ll get pushback for closing this loophole

View on HN

Do we know if they still continued with the data scanning? I'm all for E2EE backups, but not if it comes at the cost of scanning my data.

Apple is abandoning its CSAM scanning plan: https://www.wired.com/story/apple-photo-scanning-csam-commun...

They planned to scan only the files that would end up in the cloud anyway.

iCloud off -> no local CSAM scan.

Local CSAM scan with multiple failsafes (+ actual person checking) + E2EE iCloud -> zero need to allow law enforcement access to iCloud servers. This would also mean that Apple cloud've encrypted them in such a way that even they can't access them.

Couldn’t they simply use an encryption algorithm that has two private keys and they control one?

Yes, but this would be apparent in the code, since the sender would have to encrypt against both public keys.

Yeah I’m thinking about how many millions of HN comments are now invalid. I’m sure there’s some other gripe in its place. That’s what we engineers do.

I’m not quite sure what you’re getting at. It’s not a sin to comment on a security issue while the issue still exists. Furthermore, correcting a security issue doesn’t render somebody immune to all complaints on future security issues.

Reply on news.ycombinator.com