Three questions about Apple, Encryption, and the U.K. https://blog.cryptographyengineering.com/2025/02/23/three-questions-about-apple-encryption-and-the-u-k/
@gruff @matthew_d_green the US has "national security letters" and the Pateiot Act, has used them to, for instance, install fibre beam splitters in telephone exchanges in secret. Pre-Snowden : https://en.m.wikipedia.org/wiki/Room_641A
@matthew_d_green To ask a very basic question: What is the meaning of a "U.K. user" in the case of a mobile device interacting with a cloud service? Is it someone with a U.K. billing address, or someone with a U.K. phone number, or someone currently within the boarders of the U.K. at any given moment, or something different?
On a more general note, the existence of this law seems like a good further argument not to trust any #E2EE implementation whose client software is not open source, ideally with 3rd party audits and reproducible builds. And with the way the App Store works, can one ever know exactly what one is getting?
@matthew_d_green Thank you, great article. Do you think governments will attempt to get access to on device scanning now that Apple has recently built the ‘Enhanced Visual Search’ feature?
@ridogi @matthew_d_green and Google is doing "blur your nudes" in device too. One legal instrument later and it'll send them off device.
For the sake of the children, of course.