Apple disables end-to-end encryption for UK iCloud users after government push

[zohaibahd]

What just happened? Apple has caved to pressure from the UK government and scrapped its toughest encryption safeguards for new users nationwide. As of this week, new iPhone owners in the country are being stripped of Apple's uber-secure "Advanced Data Protection" feature. Meanwhile, existing ADP users will have to disable the feature manually during an unspecified grace period.

The about-face comes after months of Apple pushing back against demands that it create a backdoor to allow government snooping on encrypted data. Rather than cave and risk compromising the integrity of its systems worldwide, Apple decided to simply yank the Advanced Data Protection option for new UK users.

Advanced Data Protection was Apple's extra layer of security that encrypted synced iCloud content such as photos, notes, reminders, bookmarks, and iCloud backups in such a way that only users could access it on trusted devices. It was essentially end-to-end encryption that stored the keys on the user's device instead of Apple.

This doesn't mean that encryption has been entirely disabled. It's merely being downgraded to standard encryption, which still keeps things safe in transit. The only difference this time is that it's Apple holding the decryption keys.

This makes it easier for the UK authorities to request user data from Apple since the keys now lie with the company – a potentially dangerous scenario for users in the country.

However, Apple is clearly not waving the white flag just yet. Pulling the encryption feature entirely instead of building a backdoor is already a clear rebuke of the order. The company laid it out plainly in Friday's statement: "we have never built a backdoor or master key to any of our products or services and we never will."

For now, it appears that Apple is digging in its heels in this battle. That said, if the UK fully bends Apple to its will, it could set a precedent where other countries follow suit if their law enforcement agencies take issue with the company's hardline security stance.

Of course, not everything is being thrown under the unencrypted bus. Bloomberg's Mark Gurman reports that Apple is keeping end-to-end encryption in place for health data, passwords, Apple Pay info, iMessages, FaceTime calls, and more core iPhone services.

Still, Apple is clearly frustrated. The company says it's "gravely disappointed" at not being able to provide the maximum level of protection in the face of "continuing rise of data breaches and other threats."

Masthead credit: charlesdeluvio

Permalink to story:

Apple disables end-to-end encryption for UK iCloud users after government push

 

[themastergoose]

"Disabling the feature entirely instead of letting the government access data".

This title from the article is wrong. Apple has disabled the advanced security and caved entirely into allowing the UK government access to said data whenever they want.

Apple has indeed blocked access via a backdoor, by welcoming them in thru the front door instead.

 

[Acomputernerd]

TI'm worried that Britain is becoming more and more like China.The Chinese version of the IOS device stores all data in the Communist Party's "Guizhou on the Cloud" without end-to-end encryption, and the Chinese government has banned its citizens from using any end-to-end encrypted chatting software, as well as all end-to-end network storage disk

 

[winjer]

What is going on in the UK?
In recent times, every time there is some news about the UK, it's always something bad.

 

[themastergoose]

What is going on in the UK?
In recent times, every time there is some news about the UK, it's always something bad.

You should look up the 'Online Safety Bill' we introduced, with further 'enhancements' coming soon. We've already got screening for any illegal content in photos, videos and documents now. Further expanded that to criminalise posting anything negative in written form online, especially if it's targeted at those who are coming here on little boats to 'enrich' the culture.

It's being debated further because they also want to ban whole drive encryption and VPN use among other things.

 

[winjer]

You should look up the 'Online Safety Bill' we introduced, with further 'enhancements' coming soon. We've already got screening for any illegal content in photos, videos and documents now. Further expanded that to criminalise posting anything negative in written form online, especially if it's targeted at those who are coming here on little boats to 'enrich' the culture.

It's being debated further because they also want to ban whole drive encryption and VPN use among other things.

That is the kind of thing one would expect from a totalitarian dictatorship.
The UK really is in a bad place right now.

 

[CowsGotMilk]

Just close all the Apple stores and stop shipping Apple products to the UK. In 30 days the UK government would settle.

 

[Burty117]

You should look up the 'Online Safety Bill' we introduced, with further 'enhancements' coming soon. We've already got screening for any illegal content in photos, videos and documents now. Further expanded that to criminalise posting anything negative in written form online, especially if it's targeted at those who are coming here on little boats to 'enrich' the culture.

It's being debated further because they also want to ban whole drive encryption and VPN use among other things.

Don't forget they're also trying to access all our bank accounts and automatically take money.

Corruption and greed has completely killed this country, Britain will go out in a wimper over the next 30 years, probably less at the rate things are going.

 

[pnntmp]

WTF is wrong with the UK ?????

It's looking more and more dystopian.
The government wants to snoop on its citizens totally unchecked, a social media post puts you in jail, while gangs of primitive savages rape children undisturbed and mentioning that also puts you in jail.

 

[ScottSoapbox]

This article undersells how bad this is. The UK can access complete icloud backups once that is off. Their security laws allow essentially unlimited access requests so you are backing up everything on your phone to the government.

I hope the US doesn't follow.

 

[unoficialoficial]

It is a reflection of the fear of the population, especially women, who are willing to exchange their freedom for more security. The US has the death penalty for similar reasons. Women's intolerance to fear is a significant factor. They are easily scared, what can we do about it?

 

[Dreadcthulhu]

Something to consider here - plenty of UK government officials use iPhones, and I have no doubt many of them have accidently uploaded stuff they should not have to their iCloud account. With all UK iCloud accounts being unlocked, what is to stop other governments from requesting Apple turn over data from British government officials who forget to clear their phones? For example, I am sure the current US admin could come up with some plausible warrants to root through British government iPhones over something like electoral interference. The British Labor party did send plenty of volunteers to aid the Harris campaign, it would not be hard to convince a judge that perhaps they were possibly not volunteers and were possibly being paid. I am sure other countries could come up with valid reasons to look through UK government phones too.


Article below discusses those foreign volunteers, have had people accuse me of making it up before.
https://www.bbc.com/news/articles/c62m2pde4p6o

 

[Cocojambo13]

"Disabling the feature entirely instead of letting the government access data".

This title from the article is wrong. Apple has disabled the advanced security and caved entirely into allowing the UK government access to said data whenever they want.

Apple has indeed blocked access via a backdoor, by welcoming them in thru the front door instead.

your whole comment is an assumption as well.

 

[Cocojambo13]

TI'm worried that Britain is becoming more and more like China.The Chinese version of the IOS device stores all data in the Communist Party's "Guizhou on the Cloud" without end-to-end encryption, and the Chinese government has banned its citizens from using any end-to-end encrypted chatting software, as well as all end-to-end network storage disk

that's false, not entirely but false.

Chinese apps can USE encryption and they do use, but if the government has a request from a suspect they will get access.
Same as in UK.

So China = UK today.

 

[VaRmeNsI]

It's almost like European governments are begging for CIA backed color revolutions.

They are actively making their citizens lives worse, trying to censor to cover it up, and also picking a fight with the US.

 

[Zsoltblabla]

WTF is wrong with the UK ?????

It's looking more and more dystopian.
The government wants to snoop on its citizens totally unchecked, a social media post puts you in jail, while gangs of primitive savages rape children undisturbed and mentioning that also puts you in jail.

Actually, Britain (other then most recent history) has always been like this. They were the first government in the world to use tanks against their own people, sacrificed hundreds of thousands to push the industrial revolution, polluted all the rivers with toxic waste… everyday people were never more then cannon fodder for the elite.
Just look up what they dome with children after ww1…
The had a nicer phase after they joined the EU. Now its back to the same nasty stuff

 

[VaRmeNsI]

Actually, Britain (other then most recent history) has always been like this. They were the first government in the world to use tanks against their own people, sacrificed hundreds of thousands to push the industrial revolution, polluted all the rivers with toxic waste… everyday people were never more then cannon fodder for the elite.
Just look up what they dome with children after ww1…
The had a nicer phase after they joined the EU. Now its back to the same nasty stuff

You might want to look up what they did in Northern Ireland (whilst being a member of the EU).

 

[Zsoltblabla]

You might want to look up what they did in Northern Ireland (whilst being a member of the EU).

Yes. Good point

 

[maxxcool7421]

We need this in the US to root out all the christian pedophiles...

 

[Acomputernerd]

that's false, not entirely but false.

Chinese apps can USE encryption and they do use, but if the government has a request from a suspect they will get access.
Same as in UK.

So China = UK today.

The so-called "encryption technology" that China allows companies to use refers only to standardized encryption, such as TLS. Software like WeChat and Sogou Input Method, which hold monopolies in China, all use self-developed, non-international standard encryption. This encryption only prevents hackers from capturing packets and provides no protection against corporate or government surveillance. Additionally, end-to-end encryption for all content storage by individual consumers is forbidden (though end-to-end encryption is allowed for fingerprints on cell phones and similar data). In contrast, people in the UK have the option of using other end-to-end encrypted chat software or cloud storage services—at least for now. iOS is "just" becoming the same as in China.

The Chinese government explicitly forbids any vendor or telecom provider from offering such services to individual consumers, making it impossible to connect to MEGA, Telegram, Signal, WhatsApp, or any other encrypted service

 

[Vanderlinde]

This won't just stick with UK alone - UK has their own intelligence center and pretty much can access any given apple account they want.

It means that anything you store through Icloud is, considered "unsafe" and "can be read" by others.

There goes another bit of everyone's privacy, step by step, till the point you have none.

 

[trieste1s]

WTF is wrong with the UK ?????

It's looking more and more dystopian.
The government wants to snoop on its citizens totally unchecked, a social media post puts you in jail, while gangs of primitive savages rape children undisturbed and mentioning that also puts you in jail.

Islamist-loving Wokelibs (Islamist, not Muslim; there's a big difference). Oxymoronic, yet true. Oh, consequentially Israel-hating too.

That's what's wrong with the UK.

 

[DrSuess]

Everything I store on the cloud is encrypted by me before I push it to the cloud.

 

[manowar51]

I have family in the UK and visit quite often. Right now, they are clearly in deep trouble. Of the family I have over there, most are planning to leave. They cite crime and cost of living for their reasoning. The UK had roughly 10,000 millionaires leaving the country last year apparently which makes it second to China in total amount of millionaire exits but it only has 3% of Chinas population, which makes the number alarming. They have extortionate taxes that would make even Californias Governers blush and yet when you turn on the news you hear politicians talking about yet more tax increases. The average pay is way lower than it is in even somewhere like Mississippi, yet you pay New York real estate prices all over the country if you want a house. Fuel is extortionate and energy is beyond ridiculous, its more than 5 times what I pay per KwH here in Oregon.

They do have delightful accents though. Every time I go, I can listen to people talk all day long. Although you really do have to get out of London to find a proper British accent these days.

 

[netman]

"Disabling the feature entirely instead of letting the government access data"

Apple is UK people Traitor...!