Hacker News Reader

Parent Full thread

gonehome

Apple has “Advanced Data Protection” that you can enable

This was built after the NSO group hacks to lock down the device to be resilient to nation state attacks.

It limits some of the attack vectors you’re taking about (with a tradeoff of also limiting some features).

Apple also enabled true e2ee in the cloud where only you retain the keys.

View on HN

> Apple also enabled true e2ee in the cloud where only you retain the keys.

Is there a procedure to realistically verify that your communications are e2e and not e2mitm2e ?

All of it is a bit silly to trust companies with things like this when there are standard techniques which have stood the test of time and are *far* simpler - tar.zst.gpg or squash.gpg, luks-encrypted qemu images, etc. Things done locally are just inherently better, because it's far simpler tech, and you actually know what's happening rather than just blindly trusting some sketchy company.

Canary content for your threat-modeled attacker, then monitor for the data being acted upon, e.g. traffic to non-public URL.

Reply on news.ycombinator.com