alt Hacker NewsHow are they allowed to even offer e2ee Keychain/iCloud Passwords for example? Isnt that subject to lawful access too?
Replies
0cf8612b2e1e • today at 5:44 PM
Exactly my question as well.
Especially since big tech is steaming ahead to mandating passkeys that only they are allowed to control/backup. Not long until all governments could intercept your passwords to all services.
That is exactly the question. I took a look and we presented some of our findings at DEF CON 34. There are paths to decrypting e2ee secrets without the passcode, some of these paths are considered vulnerabilities and have received patches (CVE-2026-28864).