Hacker News Reader

Comment by dd8601fn | Hacker News Reader

ADP isn’t the default, and almost nobody who isn’t a journalist/activist/potential target turns it on, because of the serious (potentially destructive) consequences.

How does Google manage this, such every normie on earth isn’t freaking out?

View on HN

Nobody expects their text messages to be backed up.

They get deleted and people shrug.

Or IOW, Googles solution affects only messages. Apple’s solution affects your whole digital life so the consequences are a lot more dire.

Google’s solution also ensures that they know all the metadata of your messages, except the content of the message itself.

How convenient...... indeed

Apple too collects unencrypted metadata but now promises to reduce its scope.

> Apple’s solution affects your whole digital life

I don’t know if that’s generally true. I could lose my apple account and not really give a a damn. Not that I see how such a thing would happen, save for apple burning down all their datacenters. I’m running ADP

I keep my messages and would like them to not go away.

Why?

I reference them every so often

> because of the serious (potentially destructive) consequences

Huh? What are you talking about? I don’t see anything destructive about it.

People don't always have enough Apple devices to justify confidence that they couldn't lose them all at the same time, which with ADP is a permanent death sentence if you don't have your recovery key.

(Apple says you can also use a device passcode; I'm not sure if this works if the device is lost. Maybe it does?)

I have 2 or 3 yubikeys associated with my account. I think apple does a decent job at communicating the importance of having recovery keys to the point where they deter those who can’t be bothered.

Yubikeys are great

I'm always put off by the incredibly low limits on yubikeys. What's the point of having a security key if you can only have 25 accounts in its lifetime? What are you supposed to do, buy tons of keys and then figure out a system to remember which key each account is? Like fucking hell just let me use passkeys in iCloud Keychain. My bank's mobile app specifically supports only security keys and explicitly not passkeys for literally no reason because passkeys are practically just as secure as any security key. It's actually harder to specifically exclude passkeys and allow only security keys than it is to just use passkeys which automatically include security keys.

Reply on news.ycombinator.com