Apple removes data protection feature in UK

Apple has removed its most advanced encryption feature from its UK cloud, an unprecedented move in response to a government request for access to user data.

The change affects Advanced Data Protection (ADP), which extends end-to-end encryption across a wide range of cloud data. Apple said the feature is no longer available in the UK for new users, those trying to enable it will receive an error message starting February 21, and existing users will eventually need to turn the security feature off.

Apple has just removed the most advanced security encryption feature for cloud data in the UK at the request of the UK government.

The move means that iCloud backups in the UK will no longer have that level of encryption, allowing Apple to access user data in some cases where it otherwise wouldn’t be able to, such as copies of iMessages and handing them over to authorities if legally compelled to do so. With end-to-end encryption on, not even Apple can access the data.

“Apple’s decision to disable this feature for UK users may be the only sensible response at this point, but it puts users at risk of data breaches and deprives them of a vital privacy-protecting technology,” said Andrew Crocker, director of oversight at the Electronic Frontier Foundation.

Governments and big tech companies have long been locked in a battle over strong encryption to protect users' communications, which authorities see as a formidable obstacle to mass surveillance and crime-fighting programs.

Initial plans to allow Apple users to fully encrypt their device backups to the iCloud service were scrapped around 2018 after FBI complaints, but the company eventually resumed the practice in 2022.

“Lawful access to digital evidence and threat intelligence is rapidly eroding,” the Federal Bureau of Investigation said on its website.

Apple has long said it would never build so-called backdoors into encrypted services or devices, because once created, they could be exploited by hackers outside of governments, a view shared by security experts.

“Ultimately, once a door is in place, it’s only a matter of time before it’s discovered and used maliciously. Removing ADP is not just a symbolic concession, but a real weakening of iCloud security for UK users,” said Oli Buckley, professor of cybersecurity at Loughborough University in the UK.

Data that was encrypted before Apple launched the protection service in late 2022, such as passwords and messaging services iMessage and FaceTime, will remain encrypted.

This change doesn't affect the encryption of data stored directly on the device, but in an age of large photo collections, massive messaging histories, and frequent phone upgrades, many users find it impractical to store all of their data solely on the device.

Storing solely on the device also means that if the device is lost or damaged, all of the user's data can disappear, which has led many, if not most, consumers to opt for some form of cloud backup which is now more easily accessible to UK authorities.

Source: https://www.baogiaothong.vn/apple-go-bo-tinh-nang-bao-ve-du-lieu-tai-anh-192250222110123893.htm