logoalt Hacker News

sneak • today at 3:57 PM • 4 replies • view on HN

Were that were so!

iCloud Backup, on by default, is not end to end encrypted and uploads almost the entire contents of your device to Apple’s servers every night in a format they can read (effectively unencrypted). This includes your entire message history over SMS and iMessage and all attachments thereto. Photos and Contacts and Calendar aren’t included in the backup, but they don’t need to be, as those are synced to iCloud in realtime without end-to-end encryption (and readable by Apple).

(note: if you have Messages In iCloud enabled, then the iCloud backup includes a copy of that sync key instead of the messages themselves, so with the non-e2ee backup’s sync key and the e2ee Messages In iCloud traffic, Apple can read all of your messages that way.)

It is safe to assume that the data collected and assembled by these daemons is part of the iCloud Backup, which you never have to explicitly enable; it happens when you log in to iCloud on the device, usually within minutes of first powering it on for most people.

EDIT: the iCloud Backup (and the other non-e2ee data synced to icloud such as Contacts and Photos and Calendar that aren’t in the iCloud Backup) comprises all or most of the input data to these collectors; Apple can run the same models serverside over the same data to derive the same dossier.


Replies

kogir • today at 4:20 PM

While not the default, with Advanced Data Protection, iCloud Backup does encrypt backups end to end. It’s available in most jurisdictions.

https://support.apple.com/en-us/102651#advanced

1over137 • today at 4:18 PM

>iCloud Backup, on by default

iCloud is not on by default with macOS. For starters, you have to create an iCloud account!

semiquaver • today at 3:59 PM

  > It is safe to assume
No need to assume anything. This data is not included in iCloud backup. That detail is included in the article.

You are misinformed (or speculating) and spreading FUD.

shuckles • today at 3:59 PM

Photos aren’t in iCloud Backup. Have you considered doing the bare minimum to understand the features you complain about?