dgdfhdfhj

2 karma · joined December 7, 2022

dgdfhdfhjon Apple introduces end-to-end encryption for backups

> As it is, my iPhone unlock PIN is everything that's needed to decrypt the data server-side

That's not quite true. They use a HSM on their datacenters, which only allows a limited amount of guesses. They only allow a limited amount of guesses, before your data is wiped forever[1].

[1] https://blog.cryptographyengineering.com/2021/03/25/whats-in...

dgdfhdfhjon Apple introduces end-to-end encryption for backups

One must also understand that you're wrong. My threat model isn't Apple. My threat model is

a) Overreaching law enforcement, which want to take a look at what I'm up to. b) Data breach at Apple exposes all my data c) Errors where my pictures gets in another users photo album, as seen on Google Photos once.

E2EE defends against all 3