logoalt Hacker News

mmoosstoday at 10:05 PM0 repliesview on HN

Don't throw out the baby with the bathwater! Apple has some impressive privacy technology for Apple Intelligence - including significant open source disclosure for public verification. If you trash them with the rest of the AI vendors, you deincentivize privacy for Apple and for the rest of them.

They describe it in great technical detail here (Private Cloud Compute (PCC) seems to be the server side of Apple Intelligence):

https://security.apple.com/documentation/private-cloud-compu...

.

At the heart of it, they provide these guarantees:

https://security.apple.com/documentation/private-cloud-compu...

* Stateless Computation: "Private Cloud Compute must use the personal user data that it receives exclusively for the purpose of fulfilling the user’s request. User data must never be available to anyone other than the user, not even to Apple staff, not even during active processing. And user data must not be retained, including via logging or for debugging, after the response is returned to the user."

* Enforceable Gaurantees: "Security and privacy guarantees are strongest when they are entirely technically enforceable, which means it must be possible to constrain and analyze all the components that critically contribute to the guarantees of the overall Private Cloud Compute system. For example, it’s very difficult to reason about what a TLS-terminating load balancer might do with user data during a debugging session, so PCC must not depend on such external components for its core security and privacy guarantees. ..."

* No Privileged Runtime Access: PCC is designed without privileged interfaces that might expose user data.

* Non-Targetability: PCC is designed to ensure that an attacker cannot target specific PCC users.

* Verifiable Transparency: "security researchers must be able to verify the security and privacy guarantees of Private Cloud Compute, and they must be able to verify that the software that’s running in the PCC production environment is the same as the software they inspected when verifying the guarantees."