Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster
Apr 12, 2001
63,625
31,010


Apple yesterday announced that end-to-end encryption is coming to even more sensitive types of iCloud data, including device backups, messages, photos, and more, meeting the longstanding demand of both users and privacy groups who have rallied for the company to take the significant step forward in user privacy.

Apple-advanced-security-Advanced-Data-Protection_screen-Feature.jpg

iCloud end-to-end encryption, or what Apple calls "Advanced Data Protection," encrypts users' data stored in iCloud, meaning only a trusted device can decrypt and read the data. iCloud data in accounts with Advanced Data Protection can only be read by a trusted device, not Apple, law enforcement, or government entities.

Following its announcements, the EFF or Electronic Frontier Foundation, a group that has long-called for Apple to enable end-to-end encryption and take more steps to safeguard user privacy, put out a statement applauding the new feature and Apple's renewed commitment to privacy.
We applaud Apple for listening to experts, child advocates, and users who want to protect their most sensitive data. Encryption is one of the most important tools we have for maintaining privacy and security online. That's why we included the demand that Apple let users encrypt iCloud backups in the Fix It Already campaign that we launched in 2019.
Meredith Whittaker, CEO of the popular encrypted messaging app Signal, said the decision by Apple to offer end-to-end encryption "is great." "There's been enough pressure and enough narrative work that they see the side of history forming. It's really incredible," Whittaker told The Washington Post.

The Surveillance Technology Oversight Project, or S.T.O.P, called Advanced Data Protection "essential and overdue." Despite the announcement, the group is "disappointed" that end-to-end encryption will require users to opt-in and is not to be enabled by default. Fox Cahn, the group's executive director, said, "it's good to see Apple's privacy protections catching up with its sales pitch, but making these protections opt-in will leave most users vulnerable."
For years, Apple has touted its privacy record while leaving its users vulnerable, particularly to police surveillance. Much of the data users store on iCloud is just a court order away from becoming a policing tool. With these changes, Apple will keep up with the privacy best practices that other companies have followed for years. But it's disappointing that users have to opt-in to many of these new protections, leaving the vast majority at risk.
Fight for the Future, another privacy-focused advocacy group, said on Twitter that Apple's announcement of end-to-end encryption brings the company's marketing of being privacy-focused to reality. "Apple's reputation as the pro-privacy tech company has long been at odds with the reality that iCloud backups aren't secured by end-to-end encryption. This news means people's personal messages, documents, and data will be secure from law enforcement, hackers, and Apple itself." The group is now calling upon Apple to implement RCS messaging into iPhone, a move the group says is a "non-negotiable next step."

appleprivacyad.jpg

While privacy groups and apps applaud Apple for the expansion of end-to-end encryption in iCloud, governments have reacted differently. In a statement to The Washington Post, the FBI, the largest intelligence agency in the world, said it's "deeply concerned with the threat end-to-end and user-only-access encryption pose." Speaking generally about end-to-end encryption like Apple's Advanced Data Protection feature, the bureau said that it makes it harder for the agency to do its work and that it requests "lawful access by design."
"This hinders our ability to protect the American people from criminal acts ranging from cyber-attacks and violence against children to drug trafficking, organized crime, and terrorism," the bureau said in an emailed statement. "In this age of cybersecurity and demands for 'security by design,' the FBI and law enforcement partners need 'lawful access by design.'"
Former FBI official Sasha O'Connell also weighed in, telling The New York Times "it's great to see companies prioritizing security, but we have to keep in mind that there are trade-offs, and one that is often not considered is the impact it has on decreasing law enforcement access to digital evidence."

In January 2020, Reuters reported that Apple dropped plans to encrypt user data in iCloud at the behest of the FBI, which was concerned such a move would hinder investigations and its intelligence efforts. In an interview yesterday with The Wall Street Journal's Joanna Stern, Apple's vice president of software engineering, Craig Federighi, labeled the report as inaccurate. "I've heard that rumor, but I don't know where it came from."

In that same interview, Federighi said Apple "deeply appreciates the work of law enforcement and supports the work of law enforcement. We view that we really have the same mission at heart which is to keep people safe." Apple says that Advanced Data Protection will be available to all US users by the end of this year, with plans to launch globally in early 2023.

Update: This article has been updated to note that the FBI was speaking generally about end-to-end encryption, which includes Apple's new Advanced Data Protection feature.

Article Link: FBI Calls End-to-End Encryption 'Deeply Concerning' as Privacy Groups Hail Apple's Advanced Data Protection as a Victory for Users
 
Last edited:

MuppetGate

macrumors 6502a
Jan 20, 2012
651
1,086
Despite the announcement, the group is "disappointed" that end-to-end encryption will require users to opt-in and is not to be enabled by default.

This is why geeks shouldn’t make UX decisions on their own.

Apple should explain what it is and why they should use it, along with what will happen if the recovery keys are lost.

This should not be enabled by default.
 

chenks

macrumors 65816
Oct 23, 2007
1,187
489
UK
I am only concerned that this isn’t available in my ‘region’ (the U.K.). Why is that?

Advanced Data Protection for iCloud will be available to U.S. users by the end of the year and will start rolling out to the rest of the world in early 2023.

it's the usual Apple roll-out. US always gets everything first and the rest of the world can go to hell until they decide they deserve getting feature parity.

Privacy for all, unless you live outside of the US.
 

centauratlas

macrumors 68000
Jan 29, 2003
1,824
3,771
Florida
Advanced Data Protection for iCloud will be available to U.S. users by the end of the year and will start rolling out to the rest of the world in early 2023.

it's the usual Apple roll-out. US always gets everything first and the rest of the world can go to hell until they decide they deserve getting feature parity.

Privacy for all, unless you live outside of the US.

Talk to the governments of various regions too. Everyone should have it, but governments don’t like it.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.