Encryption

BlackBerry phones were once the default choice for enterprise, the combination of physical keyboard and secure messaging facility the two key selling-points. Those days are long gone.

The company dismissed the iPhone when it was launched in 2007, claiming that touchscreen phones could never compete with physical keyboards – before doing a U-turn by launching its own touchscreen phone less than a year later. A series of major service outages and a failure to deliver the promised BlackBerry 10 in 2011 sealed the company’s fate as a major player, and it today appears set to completely cede the secure messaging space to Apple.

BlackBerry CEO John Chen effectively admitted in December that the company had a ‘backdoor’ into its supposedly secure messaging system, and the company has now stated that it will this year make only Android phones – a platform not noted for its security credentials. This shortly after Microsoft’s Windows Phone looked even more irrelevant, the company reporting that revenues had halved year-on-year …

Expand
Expanding
Close

AT&T CEO Randall Stephenson is the latest to weigh in on the issue of data encryption policy with the executive telling The Wall Street Journal that Apple CEO Tim Cook and other tech execs should leave the decision making on encryption policy up to Congress:

“I don’t think it is Silicon Valley’s decision to make about whether encryption is the right thing to do. I understand Tim Cook’s decision, but I don’t think it’s his decision to make”… I personally think that this is an issue that should be decided by the American people and Congress, not by companies,”

…The AT&T chief said his own company has been unfairly singled out in the debate over access to data. “It is silliness to say there’s some kind of conspiracy between the U.S. government and AT&T,” he said, adding that the company turns over information only when accompanied by a warrant or court order.

That statement follows a meeting among Cook, other Silicon Valley executives and White House officials last week to discuss topics related to encryption policies and government access to data.

Expand
Expanding
Close

California is now presenting a new bill that, if passed into law, would stop Apple from selling iPhones on its home turf, via ZDNet. The bill requires smartphone manufacturers to sell devices that have backdoors to allow them to be decrypted. Naturally, this affects iPhones which use high-strength security methods and make it practically impossible for anyone including Apple to gain access without the passcode. If this proposed bill sounds familiar, there’s a reason for that. A nearly identical proposition was made in New York state earlier in the month.

Although the bill is only being proposed and isn’t law at this time, it poses a big issue for Apple which is facing pressure from politicians across the US to relax its stance on privacy in favor of security. The California case is especially problematic given the location of Apple’s HQ. It would be very awkward if Apple was barred from selling iPhones in the state where they’re designed.

Expand
Expanding
Close

Last week, Apple was at the heart of a conversation during the Republican presidential debate over encryption and national security. Candidates such as Jeb Bush explained that, even if companies like Apple aren’t willing to give up user data, the government has “got to keep asking because this is a hugely important issue.” Last night, NBC held a Democratic presidential debate out of South Carolina, and once again, encryption and technology’s role in national security were hot button issues during the debate.

Expand
Expanding
Close

Apple’s strong position on privacy and encryption has been at odds with the United States government’s pressure to step up its national security efforts in the wake of recent terrorist attacks across the globe. In short, iPhones are encrypted to protect customer data from prying eyes, and law enforcement agencies believe that gives criminals a safe haven for communication that can’t be traced.

The Obama administration including the former and current attorney general and FBI director have strongly voiced opposition to Apple’s position, and Tim Cook reportedly pressed the White House to back strong encryption as recently as this week. So it’s no surprise that Tim Cook and Apple came up at the end of last night’s Republican presidential debate hosted by the Fox Business channel where at least one candidate was asked to address his position on the subject.

Expand
Expanding
Close

A new bill proposed in New York could see that all phone manufacturers be required to implement a way for law enforcement agencies to access and decrypt user devices. This bill is somewhat similar to the Investigatory Powers Bill currently being debated in the UK, which Apple has voiced its opposition towards. Apple and Tim Cook have repeatedly stated that government agencies should not have any access to user devices or data, whether be through a built-in backdoor or other means.

Expand
Expanding
Close

Last Friday, Tim Cook was among a handful of Silicon Valley officials who met with White House officials to discuss the use of technology and social media in fighting terrorism. The Intercept today reports that Tim Cook again took the stance of there being no backdoors in technology to allow access to user data and devices.

Expand
Expanding
Close

Last month in the UK, a bill that could significantly change how Apple is able to encrypt user data on iOS was introduced. Called the Investigatory Powers Bill, it has the potential to require Apple to hold a key to encrypted smartphones and services such as iMessage and FaceTime. While Apple didn’t comment on the bill at the time, it has now, as expected, spoken out against it in a written submission to the UK House of Parliament.

Expand
Expanding
Close

Nobody who watched the news coverage of the terrorist attacks in Paris could fail to be moved by the scenes and the stories emerging from it. It was undeniably a horrific series of events, and it’s only human nature to want action to be taken to reduce the likelihood of future such atrocities.

But there is always a danger at such times that emotion, rather than rational thought, will drive government policy-making. I won’t get into the broader theme there, as there are more appropriate forums for that, but there is one aspect that is very much on-topic for us: the battle between Apple and governments over encryption.

There have already been unattributed reports that the terrorists in Paris used encrypted communication. I have no idea whether there is any specific evidence for that, but it would hardly be damning were such evidence to emerge: it would be frankly astonishing if they hadn’t.

There are three reasons why Apple is right to maintain that it will continue to offer end-to-end encrypted communication no matter how much governments in the USA, UK and elsewhere may protest … 
Expand
Expanding
Close

In a wide-ranging interview with the Telegraph, Apple CEO Tim Cook has hinted that the company may launch more health-focused products in future – but will keep those separate from the Apple Watch. The reason, he says, is that the FDA approval needed for full-on health devices would slow down the pace of innovation of the Watch.

Cook hints that Apple may have more plans for the health sphere, in a revelation which will intrigue Wall Street, but he doesn’t want the watch itself to become a regulated, government-licensed health product. “We don’t want to put the watch through the Food and Drug Administration (FDA) process. I wouldn’t mind putting something adjacent to the watch through it, but not the watch, because it would hold us back from innovating too much, the cycles are too long. But you can begin to envision other things that might be adjacent to it — maybe an app, maybe something else.” 

This represents a significant change from expectations …

Expand
Expanding
Close

Apple and government officials have been publicly sparring over how to handle privacy and encryption for months, and new rules expected to be proposed in the UK on Wednesday might make Apple’s position much harder to maintain.

The issue boils down to Apple allowing iPhone users to encrypt data behind a password — encryption that Apple can’t break through — and government officials wanting access in instances where de-encrypting smartphones could help law enforcement and security efforts. Services like iMessage and FaceTime are also encrypted end-to-end.

Now The Telegraph reports that the Investigatory Powers Bill being introduced on Wednesday will likely require Apple and other companies to hold a key to encrypted smartphones and services, giving access to government agencies when a warrant is issued.
Expand
Expanding
Close

A New York federal judge has indicated that he is likely to refuse a government request to compel Apple to unlock a customer’s iPhone, but will first ask Apple to explain why decrypting iPhones would be “unduly burdensome.” The iPhone concerned is apparently not running iOS 8 or 9, and so Apple would have the technical ability to decrypt it.

The Washington Post reports that Magistrate Judge James Orenstein of the U.S. District Court for the Eastern District of New York is an activist judge who is believed to be attempting to open up public debate on the issue of privacy versus law enforcement … 
Expand
Expanding
Close

Reuters reports that Apple is working on significantly increasing the number of artificial intelligence specialists it employs as it works to make Siri smarter, but that the company’s commitment to user privacy imposes constraints.

As part of its push, the company is currently trying to hire at least 86 more employees with expertise in the branch of artificial intelligence known as machine learning, according to a recent analysis of Apple job postings. The company has also stepped up its courtship of machine-learning PhD’s, joining Google, Amazon, Facebook and others in a fierce contest, leading academics say.

Machine learning relies heavily on large-scale data-crunching to figure out what users are likely to want to know. But while Google analyses the data of Android users en-masse, Apple’s approach to privacy means that far less data is sent from the iPhone to its servers, making it more challenging to increase Siri’s intelligence … 
Expand
Expanding
Close

If you were wondering why manufacturers seemed to be rather slow in launching HomeKit-compatible devices, it may all be down to Apple’s stringent security requirements. Forbes reports that manufacturers are finding it hard to incorporate the extremely secure encryption standards demanded by Apple in order to achieve MFi certification for their products.

Apple is requiring device makers using both WiFi and Bluetooth LE to use complicated encryption with 3072-bit keys, as well as the super secure Curve25519, which is an elliptic curve used for digital signatures and exchanging encrypted keys.

While mains-powered WiFi kit is coping, the processing workload in battery-powered Bluetooth LE devices is leading to extremely slow response times, say manufacturers … 
Expand
Expanding
Close

While speaking at the Electronic Privacy Information Center’s (EPIC) Champions of Freedom Awards Dinner yesterday night, Apple CEO Tim Cook gave a speech during which he addressed the ongoing issues that surround privacy in the technology space. Cook, who was not physically in Washington D.C. for the event but rather spoke remotely, commented on both the steps Apple takes at ensuring customer privacy and how other companies are failing at the same task (via TechCrunch).

Expand
Expanding
Close

If you want the security of knowing your voice, text and picture messages can’t be intercepted, direct peer-to-peer communication with end-to-end encryption is the gold standard: and that’s what BitTorrent offers with its Bleep app.

Every conversation is between you and your friends. There is no cloud to hack because messages are never stored in the cloud.

For text messages and photos, Bleep offers the choice of Whispers – where both text and images disappear when they’ve been read – and Messages, which stores them locally on the device. You can also make voice calls with the same peer-to-peer encrypted technology … 
Expand
Expanding
Close