I think the burden of the proof should be on Apple's side first.
replyThey have been. Through years of use, independent auditing, industry and government certification processes, and their Apple Security Research program.
replyThey've published several whitepapers and technical documentation on how the secure enclave works and it's been poked at by security researchers for years.
replyIf it's not open source (with open hardware), you cannot trust it. Whitepapers are great, but who knows what's actually implemented.
replyApple can’t prove a negative. You have to prove they’re lying.
replyYou can. They do all the time in math and programming.
replyYou don't have to prove anything. You need to asses your risk profile and decide if you want to expose yourself to Apple or not.
replyThe rub with a locked-in, incompatible platform is that a company must not only not be lying now... but into the future.
replyAnyone who thinks Apple is going to fight for their users if their revenue slips targets and stock tanks is an idiot.
Money talks.
“100% Guaranteed safe and properly managed forever” has never, and will never exist, for anything connected to the world.
replyLeast of all with home rolled solutions. Contrary to popular belief.
1. Try to obtain an Apple Security Research Device (SRD)[1] or a jailbroken iPhone.
reply2. Set up TLS MITM between the device and the Internet. Install the cert on the device.
3. On the device, disable certificate pinning for Apple's apps.
4. Use the device normally, observe all the telemetry flowing to Apple.
You might be a little shocked at the amount of... personal and usage details sent to Apple FQDNs.
Remember: Privacy is a feature of the Apple Marketing dept -- not SWE!
1. https://security.apple.com/research-device/Do you have any more info. Or are you just going to hand wave away all the actual details, suggesting we do the research our self.
replyLet's please dispense with the "trust me bro" paranoia takes. Link to something that demonstrates your point or you're just making baseless accusations that discourage people from trusting actual privacy and security research.
replyYou can call Apple support and they can remotely take control of your entire phone. They have access to everything if they want it.
reply[dead]
replyI won't be risking it. Just use Home Assistant.
replyhttps://www.timesofisrael.com/apple-buys-israeli-startup-rep...