patrick.net

Apple reportedly dropped plans to fully secure users’ iPhone and iPad backups after the FBI complained about the initiative, reports Reuters.

Apple devices have a well-deserved reputation for protecting on-device data, but backups made using iCloud are a different matter. This information is encrypted to stop attackers, but Apple holds the keys to decrypt it and shares it with police and governments when legally required.

“LEGAL KILLED IT, FOR REASONS YOU CAN IMAGINE.”

Privacy advocates like the Electronic Frontier Foundation have long criticized this arrangement, but Apple says it’s needed for when users are locked out of their account. For iCloud backups, “our users have a key and we have one,” said CEO Tim Cook in 2019. “We do this because some users lose or forget their key and then expect help from us to get their data back.”

Back in 2018, Apple reportedly planned to close this loophole by applying the same end-to-end encryption used on devices to users’ iCloud backups — but the plan never moved forward. Reuters now says the iPhone maker reversed course after talking to the FBI about the issue.

One former Apple employee told the publication: “Legal killed it, for reasons you can imagine.” ...

In meetings with the agency, FBI officials told Apple that the plan would harm its investigations. The FBI and other law enforcement bodies regularly ask Apple to decrypt iCloud data, and in the first half of 2019, they requested access to thousands of accounts. Apple says it complies with 90 percent of such requests.