[opendtv] Re: F.C.C. Proposes Privacy Rules for Internet Providers - The New York Times
- From: "Manfredi, Albert E" <albert.e.manfredi@xxxxxxxxxx>
- To: "opendtv@xxxxxxxxxxxxx" <opendtv@xxxxxxxxxxxxx>
- Date: Mon, 21 Mar 2016 01:13:48 +0000
Craig Birkmaier wrote:
At this time Apple can decrypt data stored on iCloud servers,
as they did for the backups of the San Bernardino iPhone.
Again, this must always be the case, unless your comms are protected end to
end, and/or you believe that the iCloud = the Internet. I gave enough email
examples, and the same applies to web browsing. Unless you believe that every
web site out there is using your iCloud encryption algorithm **and** you see
that little lock symbol showing up constantly on your Safari browser, the
communications can be read by Apple for sure, or by Apple plus the ISP that
hosts the web servers.
This is plain fact, Craig. There is no way that Apple can be decrypting
messages going outside the iCloud, and NOT be capable of reading the content.
Let's remember how this started. You were laboring under the wrong impression
that ISPs require deep packet inspection, in order to gather "metadata." That
is simply false. Remember that you failed to understand how DPI and wiretapping
a telephone line amount to the same thing. ISPs should not need to use DPI in
user messages, every bit as much as telcos should not be recording your
telephone conversations.
You may have a point that it's not the FCC but some other government agency,
perhaps the FBI, that should regulate ISP use of DPI. However that is not the
same as saying the problem should be ignored. SOMEONE should definitely be
addressing this privacy issue.
Any data leaving the cloud is encrypted.
Even if you really mean the iCloud, that is false. If what you say were true, I
would always see the encryption flag set, when I read your iCloud-sourced
email. Too bad. It's **never** set.
http://www.apple.com/icloud/
"Apple takes data security and the privacy of your personal information very
seriously, and iCloud features are designed with your privacy in mind. All your
iCloud content — like photos, documents, and contacts — is encrypted when sent
over the Internet and, in most cases, when stored on our servers. If we use
third-party vendors to store your information, we encrypt it and never give
them the keys. And security enhancements like two‑factor authentication helps
to ensure the important information in your account can only be accessed by
you, and only with your devices."
Where does it claim that everything leaving the iCloud is encrypted, Craig?
Note that I could read that web site, without my browser showing it was
encrypted. And note what this iCloud encrypts. Your data stored in it, or in
third party servers. That's all. Microsoft does the same thing with OneDrive.
Big whoop.
That's why you need to use an e-mail service, as I do, where the
day is encrypted all the way to my devices.
Which is pretty absurd, right? As a user, YOU cannot count on your email being
secure, Craig, unless you take action yourself. Apple is not making it secure,
because Apple does not run all of the servers and user appliances on the
Internet. So, with DPI, Apple can read whatever content goes beyond the iCloud,
for one, and any ISP used by the other side of the conversation can too!
Bert
b��ju
I@R ����^:��
5e��b��(���Rȧ��^PԔ �
�i��اʋ��ǫr�ߊ �jب�ǭ�)౫E�狊�l���ǧv)�jg��� ��)zwm�����-~���+-����+a����n�˛���m觶����r�b�
Other related posts: