• 1 Post
  • 280 Comments
Joined 1 year ago
cake
Cake day: June 8th, 2023

help-circle







  • Everything is encrypted with iCloud except for email and something else that’s obviously not encrypted that I can’t fucking remember.

    iCloud encryption can be defeated with a server side key that’s used by Apple if you need to recover your account (so like you get your account hijacked or forget your password or something). Apple can be compelled by subpoena, like any other company, to provide the contents of your iCloud because they have this capability.

    If you don’t like that, you can turn on advanced data protection, which deletes their server side key, generates new keys and re encrypts everything after you write down your special alphanumeric key without which your iCloud contents are inaccessible.

    The security checkup in settings will let you figure out who has access to what.


  • You can look at security failures as mistakes or conspiracies.

    It’s very easy to see the Microsoft failures as conspiracies the more you learn about them because Microsoft’s material interests are aligned with the failures. To steal someone’s turn of phrase: “Microsoft gives you a foot gun for free but charges for bulletproof shoes”.

    It’s very easy to see apples security failure as mistakes because the more you learn about them the more you see how apples material interests arent aligned with the failures. If I had to make a similar one liner, “apple sells you designer shoes with drop rated toe boxes. They might not be bulletproof, but you also don’t have a foot gun.”



  • None of the desktop environments like xscreensaver because it breaks their window decorations and input handling. It does this for security purposes because its job is first and foremost to be as secure as possible then once that’s done go ahead and make pretty pictures.

    If it sounds crazy that input and window decorations would be insecure, peruse the maintainers webpage and be horrified.

    Wayland needs infinite workarounds to get xscreensaver working because the way you’d do it under the Wayland framework is with a weird method called uhh ext_session_lock (I reference it in another comment but I’m not sure that’s the right one now.) which at least as of about a year ago let screen locking programs handle passwords directly!

    I think it’s an artifact of open source software being maintained by people who are on the payroll of companies that rely on the software.