Hacker News Reader

Comment by zepto | Hacker News Reader

> That's purely an implementation detail, and subject to change at any time.

That’s an evergreen complaint. If they want to introduce a general purpose scanning mechanism they can do so at any time. This is not that.

> That's why people are upset.

I don’t think so. I think they are upset because they don’t like the fact that Apple has any power over them and this remind them of that even though it is not in fact an abuse.

I actually agree with this, but I don’t think that claiming Apple’s implementation to be something it is not is helpful.

The key escrow solution is strictly worse in any future. If key escrow becomes established as a norm between cloud providers and law enforcement, then no free alternative will ever be possible.

View on HN

> The key escrow solution is strictly worse in any future. If key escrow becomes established as a norm between cloud providers and law enforcement, then no free alternative will ever be possible.

I don't think that's true. Systems or programs to encrypt locally before pushing up to a shared platform are possible and currently in use. Those that want that additional security have recourse to get it. Alternatively, people could run their own cloud sync instances (also already available in some forms). This puts the control in the users hands (don't sync to cloud, pre-encrypt to shared cloud, or do some personal sync thing), while also setting a clear precedent of what is acceptable on users personal devices.

The problem here is that this implementation really has nothing to do with cloud sync. Apple has currently linked it to whether you're pushing that data to iCloud, but that's an arbitrary distinction. In the world without iCloud, they could make it scan any media that was sent across the network. The iCloud distinction is entirely arbitrary, which is why people are not satisfied with it. There is nothing beyond promises to keep it that way, and promises are less binding than laws and national security letters.

> The problem here is that this implementation really has nothing to do with cloud sync.

It is built into the photo uploading mechanism and only scans photos in a very narrow way that can’t be twisted into generic scanning.

> they could make it scan any media that was sent across the network.

Definitely false. It cannot match anything except photos in this very narrow way.

> There is nothing beyond promises to keep it that way,

Not true. The mechanism cannot be used as a general purpose media scanner.

What is true is that Apple could add a general purpose scanner in future, but it wouldn’t leverage this mechanism, and their potential to add arbitrary spyware has always been there and is not changed by this.

Reply on news.ycombinator.com