Security News The U.K. government can now access your iCloud data after forcing Apple to weaken encryption

Status
Not open for further replies.

Gandalf_The_Grey

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
7,619
The U.K. government has forced Apple to remove its advanced data protection (ADP) feature for users in the U.K., due to a government order requiring the company to create a backdoor for accessing encrypted user data. This means that data stored on iCloud will no longer be end-to-end (E2E) encrypted in the United Kingdom, and law enforcement authorities in the U.K., can access the data whenever they deem necessary.

Apple currently has two methods of encrypting iCloud data. The standard data protection (SDP) is the default setting for iCloud users, where the encryption keys are secured in Apple data centers. In this case, only certain data is E2E encrypted and Apple can help users with data recovery in case of any issues.

However, the second method, advanced data protection (ADP) offers the highest level of security on Apple devices and the encryption keys remain only on the user's trusted devices. In this case, not even Apple has access to the iCloud data, and only the user can recover this data. Unfortunately for users in the U.K., this feature will no longer work for iCloud data storage, device backups, web bookmarks, voice memos, notes, photos, reminders, and text message backups.

The U.K. government issued this order under the Investigatory Powers Act, which has already faced significant backlash. Apple, in a statement to Bloomberg, said that it is "gravely disappointed" by this decision.
 

bazang

Level 11
Jul 3, 2024
505
The Investigatory Powers Act requires:

1. A warrant (for probable cause that must be reviewed and approved by The Crown's Judge - which do not arbitrarily issue warrants); and
2. Multi-level oversight.

His Majesty's Government cannot just willy-nilly access anyone's iCloud and other Apple data.

Every single time a government provides such limited, tightly controlled access to probable criminals' data, such articles always - and very deliberately - leave out the details that access is 1) limited and 2) tightly controlled through significant hurdles that meant to be controls against abuse and to prove justification for such access. When the access is determined to not be compliant, then it is immediately revoked.

But don't worry, all of your most valuable data is already available on the Dark Web. You've all be hacked to death for decades and most of you do not even know it.
 

blackice

Level 39
Verified
Top Poster
Well-known
Apr 1, 2019
2,874
The Investigatory Powers Act requires:

1. A warrant (for probable cause that must be reviewed and approved by The Crown's Judge - which do not arbitrarily issue warrants); and
2. Multi-level oversight.

His Majesty's Government cannot just willy-nilly access anyone's iCloud and other Apple data.

Every single time a government provides such limited, tightly controlled access to probable criminals' data, such articles always - and very deliberately - leave out the details that access is 1) limited and 2) tightly controlled through significant hurdles that meant to be controls against abuse and to prove justification for such access. When the access is determined to not be compliant, then it is immediately revoked.

But don't worry, all of your most valuable data is already available on the Dark Web. You've all be hacked to death for decades and most of you do not even know it.
The same has been said about various systems in the US. Yet the second somebody discarded the rules and oversight Elon Musk grabbed everyone’s data within hours. Rules only matter if you trust people to follow them and there is an enforcement mechanism. What happens when they lose that enforcement mechanism?
 

bazang

Level 11
Jul 3, 2024
505
The same has been said about various systems in the US. Yet the second somebody discarded the rules and oversight Elon Musk grabbed everyone’s data within hours. Rules only matter if you trust people to follow them and there is an enforcement mechanism. What happens when they lose that enforcement mechanism?
Well, if we cannot trust the UK government then let us all do it Soviet style - Trust No One and Suspect Everyone. You might as well withdraw from daily societal life and go live off the grid deep in some forest or on an inaccessible island because partaking in all the benefits of society means that you have to trust many things. Being paranoid about potential abuse of this or that is absurd - and that is the nonsense that the cybersec and privacy news spit out all the time.

The Investigatory Powers Act is entirely legit. Moreover, it works without all the ideological anti-government claims that now the UK will hack peoples' data to death. It is all ideological mis- and dis-information coming from ideologically left-leaning reactionaries.

_ _ _ _ _

DOGE performs a legal, authorized audit function within the US Government and therefore DOGE is not grabbing anyone's data. It's personnel only have read access. The staff are not exporting anyone's data or infos.

DOGE has violated no US privacy nor data protection regulations.

What exactly is Elon Musk going to do with taxpayer infos? Hmmm? He is the one who convince Trump to issue every US citizen a $5,000 or $10,000 USD check from all the recovered wasted money.

There is oversight of what DOGE is accessing. What is attempting access is not illegal nor wrong in any way as an Executive function. The cries and complaints about DOGE are politically and ideologically motivated. Should every other nation all of sudden have their own DOGE the outcry would be the same - with false allegations of privacy violations and data theft. Because there are large factions of people in the world that want bureaucracy and are willing to accept the massive taxpayer funds waste and corruption that comes with it.

For years all you see in social media are leftist ideologists demanding that the US DoD be "dismantled" and all the funds be used to fund the American welfare state. Now that Trump has directed the DoD to cut its budget by 8%, those same leftists are decrying "Trump is weakening the US defenses." Just 3 months ago those same people were demanding Biden to destroy the DoD and use the money to fund their hard left ideological plan for America.

Just goes to show you what people are really like. Deranged Trump Syndrome is a real thing.

Nobody in DOGE is stealing anybody's data.
 
Last edited:

bazang

Level 11
Jul 3, 2024
505
I’m thinking, regardless of actions, prison is out the window. That’s where the enforcement mechanism is failing. Just waiting to see if I get fired. They already have my data.
They don't need your data. The 2015 US OPM data hack put all of your data onto the dark web.

If the Executive Branch eliminates waste, then it is not unreasonable to terminate unneeded jobs. The point of government is not to run as a huge, wasteful, bloated bureaucracy. If it does, then all it is doing is ripping-off the taxpayers. Government should always be run using the business management best practices to supply or obtain the best value at the lowest costs.

If I pay 20,000 Euros per year in taxes, just like most any other taxpayer with common sense, I'd like to get two tanks instead of one, two submarines instead of one, better healthcare without 10+ month wait times, more generous national retirement schemes and benefits, etc. That only happens if there are people managing the government for what it is - a huge, national business - and manages the expenses and costs with an iron fist. The objective of every governmental leader - it should be written into national constitutions - should be to get the most out of every single taxpayer paid penny and do that with an iron fist.

Pay the same level of taxes but get more in return. (I would think this is obvious, but from social media apparently not. Running a government and enforcing corporate fiscal best practices and responsibility is decried as "Destroying democracy.")
 
Last edited:

blackice

Level 39
Verified
Top Poster
Well-known
Apr 1, 2019
2,874
As another note having worked with government contracts and accounting. There is no way they are auditing these agencies within 24 hours and finding massive waste. Just like the firing of employees who they actually needed and scramble to hire back. They don’t know what they are looking at and aren’t taking the time to learn.

So, no, I wouldn’t trust any government because I wouldn’t trust a cultural wave won’t crush UK sensibilities in government either. Keep the data encrypted.
 

bazang

Level 11
Jul 3, 2024
505
It is not the eliminating of waste or even downsizing. It’s the way in which it is being done. Ignoring the separation of powers, claiming laws don’t apply to the executive, and using executive orders to attempt to rule the country.
Multiple US federal judges (Democrats, not Trump appointed) have stated what DOGE is doing is neither harmful nor illegal. Those judges dismissed the injunctions. So the rule of US law is reigning supreme with regards to Trump, DOGE and Elon Musk.

Claims - and that is the key point - many claims that Executive Orders cannot do some of the things that Trump has ordered - are only that - claims. To establish whether or not certain Executive Orders can or cannot do this or that - that those Orders are actually violating US law - well that has to be determined by cases filed within the US legal system. That, again, is the reign of US law.

Trump is not the first US President to be criticized for Executive Orders. Other US Presidents - both Democratic and Republican - and their administrations have been challenged by injunctions and legal cases. So Trump is doing nothing that has not happened to almost every single US President since Eisenhower.

Neither Trump nor Elon Musk have ever stated that "Laws don't apply." Claiming that Trump or Elon ever stated that is just a reactionary social media statement.


They are decimating the agencies that cause Musk problems.
More reactionary social media rhetoric. Nobody has shown than anything DOGE is doing is to enable Elon Musk to "harvest all the data" and then become the American King who gets away with all crimes.


I do not trust that Musk doesn’t have American’s data sitting on his desk right now, and unless he is scraping the dark web he doesn’t have the old OPM data.
That is your prerogative but it is speculative tinfoil hat paranoia. If Elon Musk wanted to data-hack the world, then he could have done it - and gotten away with it - when he was at PayPal.

LOL, there is no such thing as "old OPM data." There is just the various OPM databases that have existed for decades, and yes, DOGE has access to it all as it should.


Really eliminating waste is also not running the government as a business, because businesses constantly make damaging decisions to appease shareholders and enrich executives. Yes, government contracts need to be better scrutinized, organizations need to be invested in, modernized, and streamlined. A structured downsizing where they even understand who they are firing makes sense as well. Being a good steward of taxpayers money is very important.
Now you're just bringing in an aspect of public corporations as distraction and to undermine the topic.

Any government is a business and needs to be run as a business. Both Democrats and Republicans enrich themselves under the radar. They are part of the problem. So choosing one political party over the other for ideological reasons defies any kind of common sense since both parties are working against their citizens.

All government agencies need to be run as businesses because that is what they are. Agency heads, department heads, and all lower staff need to be accountable and responsible for meeting the budgets. The way that is done is using good old basic accounting and management methods. The "shareholders" as you put it, are the taxpayers to which those agency staff are to be held accountable to. So business methods are the de facto way to properly run a government.


Firing the guys who manage the nukes in the dark of night because you want to move fast and break stuff is not it.
And they admitted it was a mistake and hired them back.

It makes no sense to go line-item by line-item across hundreds of thousands or millions of database entries. That process would take far too long and be very expensive. It makes absolutely no sense to try and save money, but use a method that will only hinder the cost cutting quickly and add huge additional costs. So they are going to make mistakes and they've admitted that multiple times. However, the overall net benefit is huge for the average US citizen. If US civil servants lose their jobs, they will cope. Government does not exist to provide jobs. The entire notion of government is to serve the citizens at the lowest cost possible. However, in the US, and apparently Canada, government is intended to be a gigantic, fat money-eating hog that robs the taxpayers while funding dubious programs, projects and contracts.


As another note having worked with government contracts and accounting. There is no way they are auditing these agencies within 24 hours and finding massive waste. Just like the firing of employees who they actually needed and scramble to hire back. They don’t know what they are looking at and aren’t taking the time to learn.

So, no, I wouldn’t trust any government because I wouldn’t trust a cultural wave won’t crush UK sensibilities in government either. Keep the data encrypted.
Nobody said that DOGE was performing audits to accounting industry standards. If it did that, the audits would take years, if not decades and cost hundreds of millions in USD in and of themselves.

Culturally, the UK is much different than the US, particularly where security and "personal rights." Absolutism here is shunned. Most native Brits are all for protecting personal data, but not at the expense of thwarting legitimate law enforcement and The Crown's security service investigations. That is why the UK has a much higher terrorist prosecution rate than the US. Because the laws enable law enforcement to perform the mandate that is entrusted to it by the British citizens.

Keeping data encrypted without lawful, completely legitimate exceptions because "Maybe someone will come along and deliberately not follow the rules" defies any common sense.
 
  • Like
Reactions: SeriousHoax

n8chavez

Level 20
Well-known
Feb 26, 2021
995
Got it. So let's not even try to get the budget in order. Or, better yet, we can just tax the ultra wealthy so that they eventually move out of the country and take their taxes with them.
 

blackice

Level 39
Verified
Top Poster
Well-known
Apr 1, 2019
2,874
Yes it would be stressful and would be horrible, please take care of yourself and don't let it get you down.
For the record I have not been fired. I, however, have colleagues who have. I can tell you the way it’s been done is going to decrease efficiency for a long time. I apologize for derailing the discussion. I don’t apologize for emphasizing the lack of competence and actual fiscal responsibility in the current situation.
 

blackice

Level 39
Verified
Top Poster
Well-known
Apr 1, 2019
2,874
Political derailing posts deleted. Enjoy your day everyone. Encrypt your data.
 
  • Like
Reactions: Marko :)

blackice

Level 39
Verified
Top Poster
Well-known
Apr 1, 2019
2,874
Multiple US federal judges (Democrats, not Trump appointed) have stated what DOGE is doing is neither harmful nor illegal. Those judges dismissed the injunctions. So the rule of US law is reigning supreme with regards to Trump, DOGE and Elon Musk.

Claims - and that is the key point - many claims that Executive Orders cannot do some of the things that Trump has ordered - are only that - claims. To establish whether or not certain Executive Orders can or cannot do this or that - that those Orders are actually violating US law - well that has to be determined by cases filed within the US legal system. That, again, is the reign of US law.

Trump is not the first US President to be criticized for Executive Orders. Other US Presidents - both Democratic and Republican - and their administrations have been challenged by injunctions and legal cases. So Trump is doing nothing that has not happened to almost every single US President since Eisenhower.

Neither Trump nor Elon Musk have ever stated that "Laws don't apply." Claiming that Trump or Elon ever stated that is just a reactionary social media statement.



More reactionary social media rhetoric. Nobody has shown than anything DOGE is doing is to enable Elon Musk to "harvest all the data" and then become the American King who gets away with all crimes.



That is your prerogative but it is speculative tinfoil hat paranoia. If Elon Musk wanted to data-hack the world, then he could have done it - and gotten away with it - when he was at PayPal.

LOL, there is no such thing as "old OPM data." There is just the various OPM databases that have existed for decades, and yes, DOGE has access to it all as it should.



Now you're just bringing in an aspect of public corporations as distraction and to undermine the topic.

Any government is a business and needs to be run as a business. Both Democrats and Republicans enrich themselves under the radar. They are part of the problem. So choosing one political party over the other for ideological reasons defies any kind of common sense since both parties are working against their citizens.

All government agencies need to be run as businesses because that is what they are. Agency heads, department heads, and all lower staff need to be accountable and responsible for meeting the budgets. The way that is done is using good old basic accounting and management methods. The "shareholders" as you put it, are the taxpayers to which those agency staff are to be held accountable to. So business methods are the de facto way to properly run a government.



And they admitted it was a mistake and hired them back.

It makes no sense to go line-item by line-item across hundreds of thousands or millions of database entries. That process would take far too long and be very expensive. It makes absolutely no sense to try and save money, but use a method that will only hinder the cost cutting quickly and add huge additional costs. So they are going to make mistakes and they've admitted that multiple times. However, the overall net benefit is huge for the average US citizen. If US civil servants lose their jobs, they will cope. Government does not exist to provide jobs. The entire notion of government is to serve the citizens at the lowest cost possible. However, in the US, and apparently Canada, government is intended to be a gigantic, fat money-eating hog that robs the taxpayers while funding dubious programs, projects and contracts.



Nobody said that DOGE was performing audits to accounting industry standards. If it did that, the audits would take years, if not decades and cost hundreds of millions in USD in and of themselves.

Culturally, the UK is much different than the US, particularly where security and "personal rights." Absolutism here is shunned. Most native Brits are all for protecting personal data, but not at the expense of thwarting legitimate law enforcement and The Crown's security service investigations. That is why the UK has a much higher terrorist prosecution rate than the US. Because the laws enable law enforcement to perform the mandate that is entrusted to it by the British citizens.

Keeping data encrypted without lawful, completely legitimate exceptions because "Maybe someone will come along and deliberately not follow the rules" defies any common sense.
I’ll agree to disagree.
 
  • Like
Reactions: Marko :)
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top