Apple ordered to open encrypted user accounts globally to U.K. spying.

@theverge reports: “The secret order would give the U.K. access to encrypted backups belonging to any user — not just Brits.”

https://flip.it/0Iz-og

#Apple #Privacy #Cybersecurity #Encryption #UK #Tech

  • David@infosec.exchange
    link
    fedilink
    arrow-up
    4
    ·
    14 days ago

    @[email protected] @theverge This is a #nationalSecurity disaster in the making, and a personal #cybersecurity disaster for hundreds of millions. The moment a server to person with access to keys gets compromised, the data exposure will make the #SaltTyphoon breach seem like one of those times a cop or journalist leaks the gender of a source through a pronoun. The data currently protected by #E2EE is much of the most sensitive data there is.

    The assurances provided by iCloud #AdvancedDataProtection have undoubtedly led to its being trusted with data which would harm the UK by falling into MSS/PLA and SVR/GRU hands: and that can’t be prevented if the UK’s imperial global surveillance law is complied with.

    #Apple would be better off blocking iCloud access in the UK, and explaining on Apple devicesin the UK why that is necessary, till that Investigative Powers Act amendments are rescinded.