Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In the EU / app store ballyhoo, privacy / security has been used too often.

But in general, Apple has relentlessly set standards for data privacy that no other business seemed willing or able to provide. Far from perfect, (CN datacenters) but still seemingly far out ahead.

People don't normally pay for privacy or data security because they're not considered valuable until something bad happens.

So I can at least understand why the company might lean on this loss-leader to try and prop up its position in the face of unwanted regulation.



> Apple has relentlessly set standards for data privacy that no other business seemed willing or able to provide

One of the big differences between Google and Apple is that users treat Google (IMO rightly) as a privacy threat, but treat Apple as a privacy ally. Apple's data privacy positions look a lot different if you treat them also as a privacy threat. For example, it becomes really odd that you can't set a non-Apple secure messaging app as your SMS app, or set a non-Apple browser as your default web browser. Apple insists that you share your browsing and messaging data with them.

What's the risk here? The risk is that, as has happened with nearly every darling tech company in history, Apple decides to end the honeymoon period at some point because that's what the market demands. Then you're in a position where you've handed over to Apple gobs of private data that they have unencrypted backups of.


Apple is in the process of getting into the ad business. Why not sell privacy and personal data at the same time? They are in a perfect position to sell ad attribution.

https://pluralistic.net/2022/11/14/luxury-surveillance/


> Then you're in a position where you've handed over to Apple gobs of private data that they have unencrypted backups of.

https://support.apple.com/en-us/102651


> Then you're in a position where you've handed over to Apple gobs of private data that they have unencrypted backups of.

What are you even talking about? You can E2EE all your information in iCloud, even your iOS backups, such that Apple cannot access them.


iCloud E2EE ("Advanced Data Protection") is far from perfect:

- hashes of files and photos are not E2E encrypted even with ADP on, and are accessible by Apple, "so Apple can perform deduplication". It also means they still know if you have a given photo in your photo roll.

- file type, file size, modifid/created timestamps (Photos/Drive) are not E2E encrypted even with ADP on, and are accessible by Apple

Apple says these are due to technical limitations and they're working on it, but be aware of these limitations.


> But in general, Apple has relentlessly set standards for data privacy that no other business seemed willing or able to provide.

I find this hard to believe nowerdays given what I read 3 months ago regarding law enforcement and push notification data. Google had set the standard higher in this situation.

https://www.reuters.com/technology/apple-now-requires-judges...


The standards Apple set are for others, not for itself; Apple is all too happy to extract as much data as possible from its customers to build its own ad empire while limiting others'. I'd prefer a level playing field where I can control how much data Apple and others can extract from me ("none").

Also, the whole "security" bs is exactly the same thing as governments saying we're doing this to protect you citizens from pedophiles / terrorists / druglords.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: