by Despegar on 2/7/25, 7:45 AM with 1035 comments
by ggm on 2/7/25, 8:27 AM
(Although I was able to access the article in full on the original URL)
by Lio on 2/7/25, 3:03 PM
The most likely outcome, I would guess, is that Apple just stop offering Advanced Data Protection as a service in the UK rather than create some kind of backdoor.
It's a weak proposition from the government because anyone with something to hide will just move it somewhere else with encryption. Honest UK consumers are the one's getting the shitty end of the stick because we're about to loose protection from criminals.
Daft waste of time.
by bilekas on 2/7/25, 1:01 PM
How could this even be enforced if Apple pulls out cloud services of the UK ?
It's such a ridiculous request, the British Intelligence agencies must be bored coming up with new ways to make Apple look good.
by latexr on 2/7/25, 1:11 PM
No, that does not suggest none exists, it only says they don’t have access to it. They could have chosen or have been ordered to give the keys to the government agency but not keep one themselves. I’m not saying that’s likely, just that it’s important to not take these statements as saying more than they do. They wouldn’t hesitate to use “technically correct” as a defence and you have to take that into account.
by negus on 2/7/25, 2:11 PM
by cpymchn on 2/7/25, 12:59 PM
As mentioned in the article, Salt Typhoon and the recency of this request by the UK. At this point they should know better.
My pet theory is anytime the US wants to do something illegal under US law, they simply ask the UK to do it and vice versa. That's why Salt Typhoon isn't and never will be a lesson learned.
by botanical76 on 2/7/25, 1:12 PM
edit: typo
by Havoc on 2/7/25, 1:25 PM
Just old people making bad laws about stuff they don't understand - or are straight up citizen hostile, sometimes hard to tell which it is.
by newscracker on 2/7/25, 9:42 AM
I was wondering whether this is about Advanced Data Protection, which encrypts almost all data end-to-end on iCloud. It’s only later in this report that it gets into this key detail:
> At issue is cloud storage that only the user, not Apple, can unlock. Apple started rolling out the option, which it calls Advanced Data Protection, in 2022.
Before stating this, the article says:
> Rather than break the security promises it made to its users everywhere, Apple is likely to stop offering encrypted storage in the U.K., the people said.
This means Apple would be prevented from providing Advanced Data Protection to users in the U.K.
Not making Advanced Data Protection available is made worse by this requirement:
> One of the people briefed on the situation, a consultant advising the United States on encryption matters, said Apple would be barred from warning its users that its most advanced encryption no longer provided full security.
Apple can appeal, but is forced to comply meanwhile (until the appeal is heard) anyway:
> Apple can appeal the U.K. capability notice to a secret technical panel, which would consider arguments about the expense of the requirement, and to a judge who would weigh whether the request was in proportion to the government’s needs. But the law does not permit Apple to delay complying during an appeal.
by necovek on 2/8/25, 11:40 AM
I believe we should increasingly turn to steganography as a way to ensure our privacy (obviously, combined with encryption). Something that provides simple plausible deniability but lots of data to use as a carrying medium should become the default selection (like "personal videos" — a great use for our phone cameras to build an extensive collection), so even if "identified" as potential carrier for the data, it would be impossible to convict someone over it.
I can imagine a scheme where your secret passphrase defines what bits of data in a video to use to carry actual data and yet avoid changing the output too much. Obviously, coming with a non-reversible algorithm that takes into account different lossy video encoding schemes is non-trivial, though I am sure there is some (plenty?) prior art to build off of.
by Kim_Bruning on 2/7/25, 6:24 PM
In the US, after Salt Typhoon compromised telecom networks—including court-authorized wiretap systems—the FBI has now (somewhat reluctantly, I think) started advising government officials to use end-to-end encrypted apps like Signal and WhatsApp to protect themselves. [1]
I think the UK government is running a bit behind wrt Encryption.
[1] https://www.npr.org/2024/12/17/nx-s1-5223490/text-messaging-...
by maeil on 2/7/25, 1:20 PM
> So much for personal liberties. I'd like to give Labour the benefit of the doubt and assume this is a holdover from the last government knowing how fast the civil service actually works but given the Tory 3.0 plan they are going with I wouldn't put it passed them.
>We didn't vote for this.
You very much did vote for this, you voted for Labour under Keir Starmer and he did not particularly hide his being tory-lite. If one is surprised by this they must not have paid any attention before voting.
by blindriver on 2/7/25, 7:08 PM
The US may suck every now and then, but the US constitution is one of the best things in human history. It protects us from governments like the UK that don't think they have any limits to control their citizens.
by Funes- on 2/7/25, 2:31 PM
by WhyNotHugo on 2/8/25, 10:30 AM
The only way to prevent this is to avoid this huge, massive, centralisation. Of course, Apple wouldn’t want this.
If we had lots of smaller scale hosting providers around the world (potentially dozens per country), the scope of attacking each one with such an order is much smaller.
by joey_spaztard on 2/7/25, 3:12 PM
"The USA fought a war in part because they did not like the use of general writs of assistance to allow agents of the British King to search peoples houses and papers where their suspicion chanced to fall. The UK lost that war so no way!"
by cedws on 2/7/25, 3:18 PM
by elevatedastalt on 2/7/25, 6:39 PM
by foundart on 2/7/25, 12:15 PM
From the article, discussing the idea of Apple stopping offering encryption in the U.K.
“Yet that concession would not fulfill the U.K. demand for backdoor access to the service in other countries, including the United States”
by flanked-evergl on 2/7/25, 2:09 PM
by nntwozz on 2/8/25, 12:06 PM
by ggm on 2/7/25, 8:29 AM
by pastyboy on 2/7/25, 3:12 PM
by Ekaros on 2/7/25, 8:16 AM
by ksec on 2/7/25, 10:20 AM
by captainbland on 2/7/25, 1:39 PM
by kazinator on 2/7/25, 8:53 AM
Therefore you know this is not about chasing the bad guys. It's about keeping the Average Joe under the thumb.
by ARandomerDude on 2/7/25, 3:45 PM
by GeekyBear on 2/7/25, 2:04 PM
> Apple says it will remove services such as FaceTime and iMessage from the UK rather than weaken security if new proposals are made law and acted upon.
by hatwd on 2/8/25, 4:52 PM
Where does this problem start? Is it a basic education thing that valuing one's own and others' privacy needs to be taught to kids from a young age?
For instance, in the meetings in which these ideas are proposed, why are they not considered a serious, fireable offence, like bringing up racist or sexist comments?
by sharpshadow on 2/7/25, 1:21 PM
As a solution to never have unencrypted files in iCloud.
by jonplackett on 2/7/25, 2:02 PM
I thought we had grown ups running the show now. Clearly that was optimistic.
by StackTopherFlow on 2/7/25, 4:59 PM
by f4c39012 on 2/7/25, 4:02 PM
by rtkwe on 2/7/25, 5:17 PM
by cbeach on 2/7/25, 10:25 AM
We have had a number of bad laws over the last ten years that have entrenched state surveillance and presumption of guilt.
The only party I can see taking a principled stance on civil liberties is Reform UK, whose policy document states:
> A British Bill of Rights
> Our freedoms must be codified and guaranteed. Never again can our entire country be locked down on shoddy evidence and lies. Our data and privacy must be protected. Surveillance of the public must be limited and those monitoring us held to account.
https://assets.nationbuilder.com/reformuk/pages/253/attachme...
Recent polls show Reform is currently the most popular party. So there is hope.
by fdb345 on 2/8/25, 1:09 AM
UK Law Enforcement can suck my dick.
Encryption works people. Use it.
by arghandugh on 2/7/25, 4:41 PM
- that’s silly - they can’t do that legally - this makes no technical sense - this is a bad idea - this will never happen
The entire globe becomes Xi Jinpeng’s China with American Characteristics after the iCloud encryption system is neutered and a court warrant is no longer needed.
by throw0101d on 2/7/25, 12:19 PM
> The law, known by critics as the Snoopers’ Charter, makes it a criminal offense to reveal that the government has even made such a demand. An Apple spokesman declined to comment.
* https://www.washingtonpost.com/technology/2025/02/07/apple-e...
* https://archive.is/https://www.washingtonpost.com/technology...
> The Investigatory Powers Act 2016 (c. 25) (nicknamed the Snoopers' Charter)[1] is an Act of the Parliament of the United Kingdom which received royal assent on 29 November 2016.[2][3] Its different parts came into force on various dates from 30 December 2016.[4] The Act comprehensively sets out and in limited respects expands the electronic surveillance powers of the British intelligence agencies and police.[4] It also claims to improve the safeguards on the exercise of those powers.[5]
* https://en.wikipedia.org/wiki/Investigatory_Powers_Act_2016
by DarkBell13 on 2/7/25, 10:22 PM
by DarkmSparks on 2/8/25, 2:05 PM
1: https://x.com/elonmusk/status/1876174862747930717?lang=en
by givemeethekeys on 2/7/25, 9:03 AM
by nisten on 2/8/25, 7:42 AM
This is not my opinion, this is just logic.
My opinion on this is that these people are f***g retarded.
by throwaway290 on 2/7/25, 2:50 PM
DOGE was recently unable to obtain data on Americans (https://www.msn.com/en-us/news/politics/elon-musks-doge-deal...), maybe related...
by ggm on 2/8/25, 1:18 AM
Does Apple lose much, in future revenue if people buy out of the ecology in the UK market? At scale, sure. But then again no. It's a 3.8 trillion dollar company. This is almost noise.
I don't think there will be a rush to the door. Set against overall revenue targets, they can comply and weather the storm.
by biohcacker84 on 2/7/25, 5:43 PM
America used to push the rest of the world to give their people those rights. Used to....
by amriksohata on 2/7/25, 5:34 PM
by atlgator on 2/8/25, 2:57 AM
by ksec on 2/7/25, 1:44 PM
by somenameforme on 2/8/25, 6:28 AM
I felt an obligation to excessively site stuff here, because I find it bemusing anybody in tech can take such articles or topics at face value.
[1] - https://en.wikipedia.org/wiki/PRISM
[2] - https://en.wikipedia.org/wiki/Five_Eyes
[3] - https://en.wikipedia.org/wiki/Parallel_construction#By_the_U...
by adamtaylor_13 on 2/7/25, 7:45 PM
by greenavocado on 2/7/25, 3:07 PM
by ninalanyon on 2/7/25, 3:55 PM
by localghost3000 on 2/7/25, 7:04 PM
by mrcwinn on 2/7/25, 2:59 PM
It all begs the question, what else have they requested, and of those which requests were accepted secretly?
Truly a pathetic example of a democracy.
by sneak on 2/7/25, 4:16 PM
iCloud Backup is not end to end encrypted. iCloud Photos is not end to end encrypted.
Apple can read all of your iMessages and see all of your photos.
The governments where they operate can compel them to turn over this data. They can and do. Often.
Operationally this doesn’t really change much.
by 1vuio0pswjnm7 on 2/7/25, 8:23 PM
It can just order to a third party do so. Wait, why does a third party have access to peoples' private communications. That is the Apple design. The company wants people to use their servers.
by secretsatan on 2/8/25, 10:14 PM
by PicassoCTs on 2/8/25, 11:10 AM
by Puts on 2/7/25, 2:23 PM
by pabs3 on 2/8/25, 2:13 AM
by bsimpson on 2/7/25, 10:53 PM
Cloaking mass privacy violations under "operational matters" is the most doublespeak bullshit I've ever heard.
by rchivalry on 2/7/25, 8:41 PM
by smsm42 on 2/7/25, 8:41 PM
by lrvick on 2/8/25, 1:45 PM
If you do not control the keys and the software that controls the keys, then you are not using end to end encryption.
by kittikitti on 2/8/25, 6:15 PM
by tempodox on 2/7/25, 3:14 PM
by maxglute on 2/7/25, 4:53 PM
by aryehof on 2/8/25, 10:48 AM
by mmaunder on 2/8/25, 12:52 PM
by matt-p on 2/8/25, 12:33 AM
by bn-l on 2/7/25, 3:27 PM
by aaomidi on 2/7/25, 1:41 PM
In my honest opinion, in this specific context UK should be treated with the same scrutiny we treat China.
by nico on 2/7/25, 5:57 PM
Through Five Eyes the US agencies could, via the UK, get global access to iCloud accounts
No need to change US law
by justinzollars on 2/8/25, 4:33 AM
by hardlianotion on 2/7/25, 1:42 PM
by reify on 2/7/25, 12:43 PM
Anyone with a fundamental understanding of online privacy and security would encrypt any files prior to uploading them to the cloud rendering any back doors and access to those files useless and toothless.
I dont use any of these services. I have never understood the thinking around uploading your private life to some server in the cloud when they are more secure on an external hard drive at home.
by ggm on 2/7/25, 8:28 AM
by hassleblad23 on 2/7/25, 6:38 PM
by octacat on 2/7/25, 3:32 PM
And the next day this or blocking DeepSeek (in Italy).
by secretsatan on 2/8/25, 10:17 PM
by gigatexal on 2/8/25, 4:53 PM
by nick3443 on 2/7/25, 2:56 PM
by dehrmann on 2/8/25, 3:13 AM
https://news.ycombinator.com/item?id=42975170
They're not exactly the same, but you should have similar feelings about forcing a company to hand over data to researchers and forcing a company to install a back door for law enforcement.
by mistercheph on 2/7/25, 10:14 PM
by isaacremuant on 2/7/25, 7:19 PM
Here we are, though, at the point where the government overreach for these "beacons of democracy" such as US and UK do this often and by design and we're all supposed to pretend "thing are fine, trust us". Next they'll push some other overreach using children, terrorism, drugs or some other usual excuse and people will defend it pretending the government has good intentions and largely works for the people.
by jrexilius on 2/7/25, 6:19 PM
by joemazerino on 2/7/25, 9:19 PM
by aucisson_masque on 2/7/25, 9:34 PM
Why is it tho ? The government has something to hide ? i mean it's complete bullshit, citizen have the right to privacy and government has the obligation of transparency and being accountable to its citizens.
When did the UK turned into a middle east dictatorship ?
> Google has enforced default encryption for Android phone backups since 2018. When asked by The Post whether any government had requested a backdoor, Google spokesman Ed Fernandez did not provide a direct answer but suggested none exist: "Google cannot access Android end-to-end encrypted backup data, even with a legal order," he stated.
That is absolutely laughable. If the uk government couldn't access google data, they would have ordered google the same thing they did with apple.
Apple theoretically can't access their user data when e2e encryption is enabled yet the uk government doesn't care. how does that differ from google ?
once again, if you want your data to be safe from google, apple, and the others you got to avoid all cloud and resort to use good old hard drive with encryption.
the only ones getting fcked are once again the average people who don't have much to hide in the first place, the pedophiles and terrorist they are much more aware than the old fart at the government on how to stay hidden.
by amelius on 2/8/25, 12:20 PM
by j-bos on 2/8/25, 11:03 AM
by caycep on 2/7/25, 8:29 PM
by reacharavindh on 2/7/25, 2:23 PM
by rchivalry on 2/7/25, 8:38 PM
by silexia on 2/11/25, 9:52 PM
by zimpenfish on 2/7/25, 4:30 PM
(I suppose the silver lining is that Starmer is merely sidling towards Trump as his new best mate rather than the full-throated slobbering that Johnson/Truss/Sunak would have given him.)
[0] I know this is primarily the fault of the last lot but this shower of onions haven't done anything to roll it back and/or clarify WTF is going on.
by b8 on 2/7/25, 6:27 PM
by fsflover on 2/7/25, 12:39 PM
by Andrew_nenakhov on 2/7/25, 8:55 PM
by pmarreck on 2/7/25, 7:40 PM
"No."
by stalfosknight on 2/7/25, 8:03 PM
by xyst on 2/7/25, 4:32 PM
by KurSix on 2/8/25, 6:21 PM
by smeeger on 2/7/25, 5:54 PM
by ein0p on 2/8/25, 7:05 PM
by jonplackett on 2/8/25, 11:59 AM
Sounds like quite the conspiracy theory, but if the USA were not OK with this, the UK surely wouldn’t dare to take on a crown jewel in the US tech sector, potentially causing them serious problems.
by devwastaken on 2/7/25, 3:28 PM
by m3kw9 on 2/7/25, 4:54 PM
by stainablesteel on 2/7/25, 4:38 PM
by sitkack on 2/7/25, 11:57 PM
by Malidir on 2/7/25, 3:28 PM
Hence why Trump was cheering on Starmer the other day, despite all that has gone on between them.
Americans need to wake up and realise their state uses uk/israel to do what they don't want to be seen to be doing.
by gadders on 2/7/25, 2:59 PM
by gavin_gee on 2/7/25, 11:42 PM
as a side note, its really baffling what this capability would actually provide for? Any serious criminal isn't using icloud backup or even an iPhone in the first place. So this is just a shit outcome for the general population.
If this goes through, I look forward to the news of the world expose on some cabinet members personal details
by renecito on 2/7/25, 6:32 PM
by m3kw9 on 2/7/25, 4:51 PM
by lasermike026 on 2/7/25, 5:05 PM
by mariconrobot on 2/8/25, 1:56 PM
by mariconrobot on 2/11/25, 5:12 AM
by hsuduebc2 on 2/8/25, 1:48 PM
by hunglee2 on 2/7/25, 8:08 AM