Report: Apple abandoned effort to lock down iCloud storage


A new report states that two years ago, Apple abandoned plans to beef up encryption on customer data stored on its iCloud service. The report comes after Apple entered a new politically-charged, high-profile stand-off with law enforcement over locked iPhones.

The improved security measures would extend end-to-end encryption to iCloud. The change would make it impossible for Apple to access any customer data stored on the service. Currently, iCloud offers end-to-end encryption, but the added security is limited to specific types of data such as saved passwords and health records. Most of the other data stored on iCloud, including device backups, are encrypted by Apple, and the company is able to decrypt it.

Reuters:

Two of the former FBI officials, who were not present in talks with Apple, told Reuters it appeared that the FBI's arguments that the backups provided vital evidence in thousands of cases had prevailed.

"It's because Apple was convinced," said one. "Outside of that public spat over San Bernardino, Apple gets along with the federal government."

However, a former Apple employee said it was possible the encryption project was dropped for other reasons, such as concern that more customers would find themselves locked out of their data more often.

Generally, if you're concerned about your data, especially from three-letter government agencies, you shouldn't be using cloud storage. This would be a pragmatic approach to ensure what happens on a device is secure, while capitulating to government demands. Additionally, being able to unlock devices allows Apple to provide some customer service to those not sophisticated enough to manage their devices.