{"id":22836,"date":"2022-12-12T19:54:45","date_gmt":"2022-12-12T19:54:45","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/12\/apple-angers-fbi-by-offering-more-privacy-and-security-to-users\/"},"modified":"2022-12-12T19:54:45","modified_gmt":"2022-12-12T19:54:45","slug":"apple-angers-fbi-by-offering-more-privacy-and-security-to-users","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/12\/apple-angers-fbi-by-offering-more-privacy-and-security-to-users\/","title":{"rendered":"Apple Angers FBI By Offering More Privacy And Security To Users"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

from the oh-no-the-government-is-feeling-ways-about-stuff<\/i> dept<\/h3>\n

Apple has always been a market leader in user security. Things haven\u2019t changed, no matter how much the FBI wishes\/litigates<\/a>. What\u2019s most important to Apple is that users can trust it to keep their personal info and communications private and secure. What\u2019s most important to federal law enforcement agencies \u2014 pretty much just the FBI<\/a> at this point \u2014 is on-demand access to data stored in Apple devices.<\/p>\n

Apple has been a target of hackers for years. Many of these hacking attempts are performed by government agencies. Israeli malware manufacturer NSO Group was sued<\/a> by Apple for targeting its users with extremely powerful malware capable of completely compromising devices. The FBI hasn\u2019t hacked phones, but it has spent a considerable amount of time in court trying to secure precedent that would force the company to decrypt devices. And it has spent just as much time allowing its directors to say stupid things<\/a> about encryption while angling for backdoor-friendly legislation<\/a>, despite others in the agency offering much more rational statements<\/a> on the subject.<\/p>\n

The NSO Group hackings prompted changes<\/a> from Apple to protect users from the long list of malicious governments<\/a> the tech firm sold to. Some more improvements have arrived, says Apple in its post to its Newsroom.<\/p>\n

\n

Apple today introduced three advanced security features focused on protecting against threats to user data in the cloud, representing the next step in its ongoing effort to provide users with even stronger ways to protect their data. With iMessage Contact Key Verification, users can verify they are communicating only with whom they intend. With Security Keys for Apple ID, users have the choice to require a physical security key to sign in to their Apple ID account. And with Advanced Data Protection for iCloud, which uses end-to-end encryption to provide Apple\u2019s highest level of cloud data security, users have the choice to further protect important iCloud data, including iCloud Backup, Photos, Notes, and more<\/em>.<\/p>\n<\/blockquote>\n

All good things for Apple customers. But it\u2019s the last one \u2014 the end-to-end encryption of iCloud data \u2014 that is raising the almost always erect hackles of the FBI. Earlier this year, Apple introduced \u201cLockdown Mode\u201d in response to NSO malware deployments \u2014 a feature that allowed users to block messages with attachments (a common attack vector), preventing phones from previewing web links, and (to the chagrin of phone search device manufacturers<\/a>) disabling wired connections to other devices. <\/p>\n

This goes even further. One way to get around device encryption was access to iCloud data, which was often not encrypted, much less at both ends. That option will be disappearing as Apple continues to roll this out to all users. There\u2019s still time for exploitation by government agencies, but the window is closing rapidly. Here\u2019s Joseph Mann of the Washington Post with the details<\/a>:<\/p>\n

\n

The encryption\u00a0option\u00a0<\/a>will be available for public software testers immediately, for all U.S. customers by year\u2019s end, and for other countries starting next year, Apple said. It added that it might not reach every country by the end of 2023.<\/em><\/p>\n<\/blockquote>\n

All this should<\/em> mean is that Apple is taking the lead in user security and privacy. This effort protects users against malicious hackers, whether they work the government or for themselves. This is the sort of thing law enforcement should embrace, because it means a lot of criminal acts will be thwarted. <\/p>\n

But the only thing it means to the head of the FBI org chart is that Apple wants law enforcement to fail. And the FBI is definitely going to take this personally since it\u2019s the agency\u2019s anti-encryption bullshit that has partially prompted this change. <\/p>\n

\n

Apple had intended to introduce fully encrypted iCloud storage many years ago, according to FBI agents and Apple employees at the time. The FBI objected, and Apple\u00a0shelved the idea<\/a>\u00a0rather than face a public fight.<\/em><\/p>\n

Instead, it picked specific categories of data that would be walled off from outside prying, including passwords and payment and health data. Now, everything can be stored securely except for email, calendar and contacts functions that need to interoperate with multiple providers.<\/em><\/p>\n<\/blockquote>\n

Apple met the FBI halfway. The FBI wasn\u2019t satisfied with the compromise. Instead, its directors spent years claiming Apple allowed criminals<\/a> to escape justice and made the nation less safe and secure. But the FBI\u2019s leverage is still nonexistent, despite all the time it\u2019s wasted fighting the inevitable<\/a>. <\/p>\n

Here\u2019s what I said<\/a> when Apple introduced its \u201cLockdown Mode:\u201d <\/p>\n

\n

Expect the FBI to take the lead\u00a0on the complaining<\/a><\/em>.<\/p>\n<\/blockquote>\n

The FBI didn\u2019t say much about that mode, but it is first in line for criticizing the encryption of iCloud content.<\/p>\n

\n

Late Wednesday, the FBI said it was \u201cdeeply concerned with the threat end-to-end and user-only-access encryption pose.\u201d<\/em><\/p>\n

\u201cThis hinders our ability to protect the American people from criminal acts ranging from cyber-attacks and violence against children to drug trafficking, organized crime and terrorism,\u201d the bureau said in an emailed statement. \u201cIn this age of cybersecurity and demands for \u2018security by design,\u2019 the FBI and law enforcement partners need \u2018lawful access by design.\u2019\u201d<\/em><\/p>\n<\/blockquote>\n

This statement was followed by zero<\/strong><\/em> statements from any other law enforcement agency located in the United States or elsewhere in the world. The FBI is the old man in the bathrobe, yelling angrily about kids cutting across its lawn before ducking back inside to peer suspiciously through the blinds at the foreigners<\/a> living down the street. The FBI has zero credibility on the encryption issue. It has spent four years<\/strong> refusing to correct<\/a> its overstatements on encrypted devices in its possession. Successive directors<\/a> have beclowned themselves by proclaiming a solution that keeps encryption secure while allowing at-will law enforcement access is only a nerd or two away from reality. <\/p>\n

When it bitches about this latest Apple rollout, the FBI is showing nothing but its disdain for the privacy and security of millions of phone users. The FBI is unable to see that what it wants is impossible to deliver. But that won\u2019t keep it from complaining about reality every chance it gets. <\/p>\n

\nFiled Under: cloud encryption<\/a>, encryption<\/a>, fbi<\/a>, icloud<\/a>, imessage<\/a>
\n
Companies: apple<\/a>\n<\/p>\n<\/div>\n