It lives in the same place as your other inaccessible data, which Apple has been unable to produce when served with warrants for iCloud data and the like.
They say the same thing about some of the other data that they encrypt, but then they store the encryption private keys on their servers.
Encryption doesn’t mean they can’t see the data. It means only the people with the private keys (and those who can crack the private keys or a device with the private keys) can see the data.
One must know if the data is encrypted both at rest and in transit. What type of encryption is used. Where the private key is stored. And what are the protections in-place where the key is stored
They do outline all of that, explaining how it works. The private key pair and secret are never sent to Apple. And yes, it’s end-to-end encrypted of course.
It’s not open source if that’s what you mean. If you think that stops people looking at code then I’ll have some of what you’re smoking please.
If you’re genuinely interested in how the Find My system works Here’s a good paper on it. The papers publishers even have an open source tool to connect to Apples Find My network which is neat.
Have you verified their encryption method? Where is the source code? Where is the third party public audit that verifies that it’s implemented properly with no other means of access?
Blindly trusting that they say it’s encrypted is basically the same as no encryption
On top of being privacy focused themselves, they are only working with AI parters who also pass a third party code review verifying that zero user data is stored.
Shit on Apple for not being repairable, sure. Shit on Apple for their walled garden, sure. But shitting on Apple over privacy is insane. They are they only big tech company that actually cares.
Taking the above behavior into account, Apple’s value proposition for anyone that cares about digital sovereignty is extremely brittle. I’ve decided not to invest any further into their tech. Is it the worst evil that roams earth? No. But does it logically follow that you should defend all their practices? Also no.
Hope you can approach this with an open mind. I know it’s hard, I certainly didn’t want to start doubting what I thought was a valiant defender of consumer privacy. Cases like the San Bernardino shooter were testaments for Apple’s commitment to me. It turns out that’s only half the story though.
Very disappointing. Does Apple sell Air Tag data to 3rd parties?
Apple cannot sell your AirTag data, because they don’t know it. It’s all encrypted.
Sure, it’s encrypted, but there might be a way for them to decrypt it.
It lives in the same place as your other inaccessible data, which Apple has been unable to produce when served with warrants for iCloud data and the like.
They say the same thing about some of the other data that they encrypt, but then they store the encryption private keys on their servers.
Encryption doesn’t mean they can’t see the data. It means only the people with the private keys (and those who can crack the private keys or a device with the private keys) can see the data.
One must know if the data is encrypted both at rest and in transit. What type of encryption is used. Where the private key is stored. And what are the protections in-place where the key is stored
They do outline all of that, explaining how it works. The private key pair and secret are never sent to Apple. And yes, it’s end-to-end encrypted of course.
https://help.apple.com/pdf/security/en_US/apple-platform-security-guide.pdf
Page 202 of you care to learn how it works.
Is the source code public so we can verify the implementation matches the spec?
It’s not open source if that’s what you mean. If you think that stops people looking at code then I’ll have some of what you’re smoking please.
If you’re genuinely interested in how the Find My system works Here’s a good paper on it. The papers publishers even have an open source tool to connect to Apples Find My network which is neat.
Yes. They all do.
AirTag location data is encrypted. Apple doesn’t know where they are.
Right, apple definitely doesn’t have access to the info on the products they make and sell to the public.
Do you know how encryption works?
Have you verified their encryption method? Where is the source code? Where is the third party public audit that verifies that it’s implemented properly with no other means of access?
Blindly trusting that they say it’s encrypted is basically the same as no encryption
On top of being privacy focused themselves, they are only working with AI parters who also pass a third party code review verifying that zero user data is stored.
Shit on Apple for not being repairable, sure. Shit on Apple for their walled garden, sure. But shitting on Apple over privacy is insane. They are they only big tech company that actually cares.
I used to hold the same opinion you do, but after reading this article, reality caught up with me:
https://www.nytimes.com/2021/05/17/technology/apple-china-censorship-data.html
If you want a shorter version of this that puts the consequences into perspective, I recommend one of Cory Doctorow’s blog posts: https://pluralistic.net/2021/05/18/unhealthy-balance-sheet/#think-manorialism
Taking the above behavior into account, Apple’s value proposition for anyone that cares about digital sovereignty is extremely brittle. I’ve decided not to invest any further into their tech. Is it the worst evil that roams earth? No. But does it logically follow that you should defend all their practices? Also no.
After reading the above, it shouldn’t surprise your that Apple spies on their users too, if only a bit less than, say, Facebook/Meta: https://pluralistic.net/2022/11/14/luxury-surveillance/#liar-liar
Hope you can approach this with an open mind. I know it’s hard, I certainly didn’t want to start doubting what I thought was a valiant defender of consumer privacy. Cases like the San Bernardino shooter were testaments for Apple’s commitment to me. It turns out that’s only half the story though.
This is made up fantasy land paranoia. Charlie Day with a big board shit.
Yep apple is secretly grabbing data that not one privacy expert has found. Just like those sneaky Alexas that are always listening to me.
They sell AirTag location data? I honestly find that hard to believe. What’s your source on this other than big tech bad?
They don’t have one. It’s the new “Alexa is spying on you”.