Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> The worst thing a corporation is likely to do (other than giving your data to governments)

There, you said it. If we want to keep data out of the hands of wrong governments, we better keep it out of the hands of corporations.



Thank you. If governments have more restrictions than corporations, all that will happen is that corporations will immediately spring up to exploit this arbitrage opportunity.


To be fair, Apple seem to try really quite hard to keep users data out of its hands


Non E2E encrypted on by default iCloud backups say otherwise..

And remember that enabling advanced data protection just means they'll get your conversations from the other partys' iCloud backups.


Most users' "threat model" is loss from actually losing things, or doing dumb things to themselves. They expect Apple to fix that.

Apple understands this, and in most markets there's a Genius Bar somewhere near the user, with technology letting Apple help them.

If your model is something else, they also have your back.

> remember that enabling advanced data protection just means they'll get your conversations from the other partys' iCloud backups

Conversations may have a counterparty not using ADP, your data storage probably doesn't.

And yes, who else can see things is very important. People show others "your" messages on their phones all the time, the more unfortunate the message, the more likely they are to overshare. Very much worth remembering they have copies of the same discussion, for this, and for backups.

While ADP won't solve betrayal of trust through analog sharing or digital resharing, Apple DO have a way to ensure your message is only between you and a personally verified counterparty:

- iMessage Contact Key Verification: https://support.apple.com/en-us/118246

After that, trust is up to you, or use a different app – knowing it can still be shown.


On one hand, I get the business reasons for not using E2E by default (it’d make data recovery more difficult for probably the vast majority of their users, which would be a customer service headache). Hell, even some experienced users would be more inconvenienced when something goes wrong. But if they won’t enable it by default, the option to enable it needs to be MUCH more clearly presented to users. The current implementation leads users to believe their data is more private than it is, which imo is just asking for trouble down the line.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: