Cloud Storage & Backup

[DrMacintosh]

1 minute ago, KuJoe said:

So if you backup your iMessages to iCloud, lose your phone, and buy a new phone then how are the messages restored if the user doesn't have to input a key?

Once you sign into your new phone that becomes the new input key. 

 

You can then remove the old iPhone if you didnt already do that. 

[DrMacintosh]

Just now, The_Askinator said:

True true, if you're into the Apple ecosystem, then I guess paying premiums for simplicity is normal.

Its $1 a month. I buy songs more frequently. 

[The_Askinator]

Just now, DrMacintosh said:

Its $1 a month. I buy songs more frequently. 

Why pay for music when you can just listen to it on Youtube?

[DrMacintosh]

Just now, The_Askinator said:

Why pay for music when you can just listen to it on Youtube?

Ever heard of bit rate? Offline access? Ability to burn to CDs? Put the files on any drive? listening while the display is off? 

 

Need I go on? 

[KuJoe]

Just now, DrMacintosh said:

Once you sign into your new phone that becomes the new input key. 

 

You can then remove the old iPhone if you didnt already do that. 

That's extremely insecure and extremely easy to bypass. Buy new phone, reset iCloud password, sign into iCloud, and they have access to everything encrypted in the iCloud (and being Apple, they can easily reset your iCloud password to anything they'd like). No thanks. It's completely your decision who to trust with your data, but don't think Apple doesn't have access to your files.

 

Quote

Apple helped pull data from Farook's iCloud account, but some dates were missing. And the FBI couldn't get into the phone because it didn't know the passcode.

Source: https://www.cnet.com/news/apple-vs-fbi-one-year-later-still-stuck-in-limbo/

[DrMacintosh]

2 minutes ago, KuJoe said:

reset iCloud password, sign into iCloud,

Measures are taken to prevent that. You cant just reset an AppleID password. 

 

TwoFactor, in addition to security questions, plus needing the original AppleID or the one time only recovery code you set up.  

[KuJoe]

I will say that Apple pricing isn't bad, $9.99/month for 2TB isn't horrible.

[KuJoe]

Just now, DrMacintosh said:

Measures are taken to prevent that. You cant just reset an AppleID password. 

 

TwoFactor, in addition to security questions, plus needing the original AppleID or the one time only recovery code you set up.  

All of which Apple can get or have or set. Either way, if Apple wants access to your files there is very little from stopping them. It's good to trust them, but don't trust them blindly with anything you wouldn't trust Google or Amazon with.

[DrMacintosh]

Just now, KuJoe said:

All of which Apple can get or have or set.

This is just wrong

[KuJoe]

Just now, DrMacintosh said:

This is just wrong

Agree to disagree I guess. Either way, Apple has handed over iCloud data to the FBI in the past and will do it again in the future. It's not bulletproof if you don't hold all of the keys.

[DrMacintosh]

1 minute ago, KuJoe said:

but don't trust them blindly with anything you wouldn't trust Google or Amazon with

Apple has far better policies, and security measures than either of those companies. 

[DrMacintosh]

Just now, KuJoe said:

It's not bulletproof if you don't hold all of the keys.

You dont hold the all the keys even with a external drive. 

 

If I get that drive I can either hack it, or smash it. Either way, your data is gone 

[KuJoe]

2 minutes ago, DrMacintosh said:

You dont hold the all the keys even with a external drive. 

 

If I get that drive I can either hack it, or smash it. Either way, your data is gone 

That's why multiple off-site backups are the best solution. It's impossible to be 100% secure, how secure you want to be depends on how much time, effort, and money you're willing to spend and what resources you have available to you. I personally hold all of the keys to my backups so nobody can access them unless I want them to. But I've put a lot into my backups, I don't reasonably expect others to do the same (I'm just paranoid about backups for some reason).

[DrMacintosh]

Just now, KuJoe said:

multiple off-site backups are the best solution.

Hard to maintain, not practical for the end user. 

 

I have a feeling Craig Federighi would say

 

"bullsh*t" to that statement. 

[KuJoe]

Here's my backup scheme from 2016, it's not perfect by any means but I've improved upon it this year and have taken steps to secure it even better: 

 

This scheme offered me 11 backups of my important data, 6 local and 5 off-site. I used to have a breakdown of the costs but I can't find it off hand. 

 

I also found my backup scheme from 2015 which was sorely lacking in redundancy (I figured I'd post it to show the progression): 

[KuJoe]

I did a breakdown of the cost for multiple different storage services I'm considering if anybody is interested (some of them are not "cloud" storage):

Service	Storage (GB)	Annual Price	Cost Per GB
Amazon Drive	1000	$59.99	$0.06
Google Drive	1000	$99.99	$0.10
OneDrive	1000	$69.99	$0.07
hubiC	10000	$55.97	$0.01
Apple iCloud	2000	$119.88	$0.06
Dropbox	1000	$99.00	$0.10
Amazon Glacier	1000	$48.00	$0.05
Dacentec	4000	$300.00	$0.08
Online.net	1000	$67.16	$0.07

[leadeater]

1 hour ago, DrMacintosh said:

Measures are taken to prevent that. You cant just reset an AppleID password. 

 

TwoFactor, in addition to security questions, plus needing the original AppleID or the one time only recovery code you set up.  

Apple can if they wish just disable 2FA on your account, they'll do this along with other things to comply with court orders to provide access. The case with the iPhone is different since there is a physical encryption chip in the device with the key unknown to apple, iCloud does not have this type of functionality and anything they implement they can be disabled.

 

The only reliable method of knowing your data is safe and encrypted is to do it yourself.

 

Edit:

And if someone knows enough personal information about you they can ring apple support and request 2FA be disabled, just say you lost the 2FA device or what ever. They'll ask a bunch of questions about you that need to match the account and hey preseto 2FA off. After that it's just a matter of having access to the email account, or ringing back the next day and getting them to change the email address.

 

Weakest point in all of these is humans.

[DrMacintosh]

1 hour ago, KuJoe said:

Here's my backup scheme from 2016, it's not perfect by any means but I've improved upon it this year and have taken steps to secure it even better: 

 

This scheme offered me 11 backups of my important data, 6 local and 5 off-site. I used to have a breakdown of the costs but I can't find it off hand. 

 

I also found my backup scheme from 2015 which was sorely lacking in redundancy (I figured I'd post it to show the progression): 

again way to cumbersome and not elegant at all. 

 

If you data is that important dont put it on a computer. 

[KuJoe]

1 minute ago, DrMacintosh said:

again way to cumbersome and not elegant at all. 

 

If you data is that important dont put it on a computer. 

That's not a good way to look at things, just because it's hard doesn't mean it shouldn't be done especially if it's important. If you can think of a better way to store code and documents besides digitally I'm all ears.

 

Everybody should be willing to spend an hour or two setting up backups, don't put yourself at risk just because it takes a bit of time.

[DrMacintosh]

Just now, KuJoe said:

That's not a good way to look at things, just because it's hard doesn't mean it shouldn't be done especially if it's important. If you can think of a better way to store code and documents besides digitally I'm all ears.

I dont have anything THAT important to need 11 backups. 

[KuJoe]

Just now, DrMacintosh said:

I dont have anything THAT important to need 11 backups. 

I do.

[leadeater]

Also this is @yathis topic and should be about the question being asked, relevant but off topic discussion should be kept to a minimum.

[KuJoe]

2 minutes ago, leadeater said:

Also this is @yathis topic and should be about the question being asked, relevant but off topic discussion should be kept to a minimum.

I got a little off topic with my backup schemes but the discussion of Apple's privacy/security was brought up because of this post from @yathis:

1 hour ago, yathis said:

Yeah Apple seems cool, with their holding out on opening someones phone to the feds.

I should look into that.

 

Thanks for the tip!!!!

I just wanted to point out that Apple's iCloud is no more secure than any other cloud storage where you don't create and have sole access to the encryption keys.

[leadeater]

5 minutes ago, KuJoe said:

I got a little off topic with my backup schemes but the discussion of Apple's privacy/security was brought up because of this post from @yathis:

Yea, was more just a 2 page topic with 1.8 pages having no involvement with the actual OP, or 3 out of 47 replies being from the OP. I'm no shining example, I go off topic all the time lol.