Apple holds iCloud master decryption key

Ars Technica:

Ars recently attempted to delve into the inner workings of the security built into Apple’s iCloud service. Though we came away reasonably certain that iCloud uses industry best practices that Apple claims it uses to protect data and privacy, we warned that your information isn’t entirely protected from prying eyes. At the heart of the issue is the fact that Apple can, at any time, review the data synced with iCloud, and under certain circumstances might share that information with legal authorities.

It’s a a good article and should be read by anyone who uses iCloud but the bottom line is, if you didn’t encrypt it yourself, it can be vulnerable to others.



2 thoughts on “Apple holds iCloud master decryption key”

  1. And that’s exactly the same way it is with any cloud service…hell, with anything that saves data…if you didn’t encrypt it yourself, somebody can read it.

  2. Yep. You can bet that Google has a master key to get into your stuff. Same with Dropbox etc. 

    The issue isn’t the presence of the key or what they CAN do with it. It’s if they do. Its one thing to say that they will look if they are given a warrant. It’s another if they are doing it cause they just want to and screw you if you don’t like it. 

Leave a Reply

Your email address will not be published. Required fields are marked *