
However, allowing users to control encryption keys creates a massive usability problem. That’s why Apple can access customer data if required by law enforcement Apple controls the encryption key and can recover the data without the customer’s knowledge or permission.īefore you call this a massive security flaw, keep in mind that my sources tell me that Apple has seriously looked at encrypting these backups with customer-managed encryption. Apple encrypts those backups in storage, but they aren’t protected with a separate user-defined password or encryption key. The Difference between iCloud and iTunes Backups - By default, iOS devices try to back up to iCloud. While I wish that Apple hadn’t made this change, and I do consider it a hit to my personal security, I can see where Apple is coming from and how the company may see it as enhancing the safety of user data. In absolute terms, Apple’s change is a step backward for iOS security, but the nuances of real-world usage suggest that Apple believes it’s a net improvement for protecting user data from loss. IOS 11 Encrypted Backup Change Reduces Security, Boosts Data Safetyĭigital forensics firm Elcomsoft revealed this week that Apple has changed how encrypted iOS backups are protected, reducing security to improve the overall user experience.Įlcomsoft’s discovery kicked off a vigorous debate on Hacker News and Twitter, but does this change represent a real risk to the average Apple user? The answer is yes, but that answer has to be understood in the proper context. #1617: Pages regains mail merge, HomeKit sensor improvements, keyboard flags in Monterey.Preview selections, portable power for a MacBook Pro #1618: M2 MacBook Air available to order, Lockdown Mode, Live Text vs.#1619: Stage Manager first impressions, Live Text in Preview redux, SMS 2FA failure fix, moving large folders with ChronoSync.#1620: OS updates, AssistiveTouch for iOS shortcut palette, Photos album sharing bug.#1621: Apple Q3 2022 financials, Slack's new free plan restrictions, which OS features do you use?.
