Saturday, February 08, 2025

UK officials are reportedly demanding backdoor access to Apple iCloud accounts

Thanks 'MF':

https://t.me/WeTheMedia/117766

Apple has reportedly been ordered by the UK government to create a backdoor that would give security officials access to users’ encrypted iCloud backups. If implemented, British security services would have access to the backups of any user worldwide, not just Brits, and Apple would not be permitted to alert users that their encryption was compromised.

The Washington Post reports that the secret order, issued last month, is based on rights given under the UK’s Investigatory Powers Act of 2016, also known as the Snoopers’ Charter. Officials have apparently demanded blanket access to end-to-end encrypted files uploaded by any user worldwide, rather than access to a specific account.

Apple’s iCloud backups aren’t encrypted by default, but the Advanced Data Protection option was added in 2022, and must be enabled manually. It uses end-to-end encryption so that not even Apple can access encrypted files. In response to the order, Apple is expected to simply stop offering Advanced Data Protection in the UK. This wouldn’t meet the UK’s demand for access to files shared by global users, however.
READ | XPOST | WTM LINKS


***




They want the ability to view users' encrypted data.



Mariella Moon
·Contributing Reporter
Fri 7 February 2025 at 10:35 pm AEDT·2-min read


SOPA Images via Getty Images


UK officials have ordered Apple to create a backdoor that would allow them to see what users worldwide have saved on their iCloud accounts, according to The Washington Post. Their order reportedly demands blanket capability to view all of a user's fully encrypted material whenever they want, wherever the target is located.

While only certain iCloud data is end-to-end encrypted by default, users can choose to activate Advanced Data Protection for better security. With the optional setting enabled, the majority of a user's data is protected by encryption, including their iCloud Backup, Photos and Notes. Except encryption won't do users any good if authorities in the UK decide to take a look at their iCloud content.

Apple will likely stop offering encrypted storage to users in the UK, The Post's sources said, so it wouldn't have to promise them greater security knowing that authorities will be able to access their account. As the publication notes, though, it doesn't solve the issue of authorities demanding a backdoor entrance for all accounts, even for users outside the region.

Authorities issued the order under the UK Investigatory Powers Act of 2016, which covers how they can get their hands on data and information for law enforcement purposes. When the UK government made changes to the Act last year, it said they were meant to "ensure the intelligence services and law enforcement have the powers they need to keep pace with a range of evolving threats from terrorists, hostile state actors, child abusers and criminal gangs." The company won't be able to confirm receiving the order, because it would be a criminal offense to do so. But it if did indeed get one, then Google, which has more users around the world, might also receive one soon if it hasn't gotten one yet.

Apple received a draft of the order when those changes were being debated by government officials last year. In a written submission protesting them, it said that the planned provisions "could be used to force a company like Apple, that would never build a back door into its products, to publicly withdraw critical security features from the UK market." The Post says the company can still appeal the notice, but it can't use that appeal to put off its compliance.




No comments:

Post a Comment