Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Its private from 3rd parties, but not private from apple and whoever subpoenas them.

Apply this principle to everything apple does and says about privacy and you see it everywhere in their products.

Even more cynically, you can say it's private from their competitors.



"AirTag is designed from the ground up to keep location data private and secure. No location data or location history is physically stored inside AirTag. Communication with the Find My network is end-to-end encrypted so that only the owner of a device has access to its location data, and no one, including Apple, knows the identity or location of any device that helped find it."


That is not true. All locations are encrypted with a public key before being uploaded to Apple's servers, and only the user's devices (which contain the private key) can decrypt the location.


> Even more cynically, you can say it's private from their competitors.

I've heard this from a few people recently, but I don't understand the implied criticism. What should Apple do here? Keep my data mostly private but also slip a copy of it to Google and Microsoft?

Obviously not. Through the high purchase price of their products, I'm paying (and trusting) Apple to manage my privacy and keep it private from everyone else. The fact that "everyone" necessarily includes all of Apple's competitors isn't just irrelevant, it's a red herring.


The implied criticism is they should also keep it private it from themselves


Wherever possible, they've done exactly that—so how is that a criticism? Case in point is the end-to-end encryption of iMessage. Or the at-rest encryption of iOS devices.

In other instances where Apple does have access to your data, there is a plausible justification for that access and no evidence shown where Apple has ever abused that access for commercial gain.


iCloud backup is on by default, which includes the contents of your iMessage conversations, even if you do turn off this default, your conversations with most other normal people are uploaded in a form where apple has the keys. Apple had plans to make all of iCloud backups E2E encrypted but backed out after pressure from the FBI. https://www.forbes.com/sites/kateoflahertyuk/2020/01/21/appl...

That is one example of many where apple could do it, but doesn't. To do many things on your apple device requires an apple id, which requires a phone number which is linked to identity. Location services uploads your location to apple constantly via close by wifi APs + GPS location, there is no option to do GPS only location w/ no network activity. All of this info is one secret supoena away to be uploaded to violent people with guns. YOU may trust your nice government, but many do not have the luxury of living in such a nice place.

Over and over again, you see the pattern of apple doing of 'private from everyone, except us'. And not mentioning the 'but us' part.


They say in the AirTag video that "Everyone can participate without sharing their location with anyone, even Apple"

https://youtu.be/JdBYVNuky1M?t=570


So there's a way to track everyone's expensive kit and it doesn't require revealing one's identity. Ace.


I think it's a pretty reasonable response given malls and other places were scooping up bluetooth and wifi Mac addresses and using them to identify patrons. Sure, only Apple knows so it might possibly have some benefit to Apple and even less possibly a detriment to competitors, but it definitely increases privacy and I find that very compelling. Your iPhone/Android already knows where you are with location services enabled. I'd rather Apple keep everything as private as possible and it's not like their getting a huge data gain.


Yep, Apple hasn't exactly hidden that's how they do privacy. They give you an identifier that makes sense to their systems, but won't make sense to other observers. They still track you, they just don't tie it to PII (I'm assuming there are ways to associate your "anonymous" ID to you though, since it's probably wrapped up with iCloud stuff somewhere - it would just take an arcane query of some sort).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: