upvote
The Snowden PRISM revelations showed that all the major tech companies work with the US government and its spy agencies. Can't trust anyone.
reply
Snowden’s PRISM leak seemed largely to be an overhyped internal PowerPoint. The claim was that they have access to data from Apple, Google, Microsoft, et al. But I’ve never seen any evidence that these companies were giving the government access to their servers or some general data pipe. But rather than they were cooperating with legally served warrants.

Is there some actual evidence of collusion with the big tech companies? Because I haven’t seen it. (Telecoms I’ve heard were and are much more integrated.)

reply
PRISM was FISA, and was overhyped. There's a known (and legal) procedure for law enforcement agencies to go to major tech companies with a warrant and say "We need all the information for the account holder of xyz@gmail.com, because they are the subject of an active investigation." There are some concerns about how FISA courts are just rubber-stamps and don't actually read or challenge the warrants for validity, but at least nominally, the procedure is above-board and legal.

The next Snowden disclosure (MUSCULAR) was significantly more concerning though. It was that the NSA was tapping the internal fiber of Big Tech companies. I was at Google when the Snowden disclosures broke, and read the SRE postmortem. They found 2 fiber cuts underneath the English Channel, an hour apart, lining up with the start of the program as disclosed by Snowden. My inference is that the NSA paid off MI6 to send a submarine commando team to cut and tap the fiber of an American company, without consent, and then all the data was shared through Five-Eyes reciprocal data sharing agreements. Google leadership was hopping mad after this, but it would've been impolitic to bring it to the public. They started encrypting all internal traffic soon after, assuming that their internal network was compromised by various nation-state actors, which had some unfortunate effects on their internal culture of openness.

reply
Good practice in general to not trust your internal network.

The head security guy where I worked 20 years ago was already saying this.

reply
I have to say your head security guy was way ahead of the curve.

Anywhere I’ve worked it was firewall everything and use VPNs, and most places still do this. SFTP was in the too hard basket. And of course that led to people emailing files around as standard practice (and the only option) and inevitably some got emailed to the wrong recipients.

reply
deleted
reply
All of the three big powers force their Big Tech companies to lets call it co-operate. Ask yourself why...
reply
> Of all the major tech companies around the world, Apple has the most incentive to actually deliver privacy, and has the best track record.

Honestly, based on what? That they haven't been caught?

reply
It's a major selling point, for one. They actively sell their products on privacy to the average person and an exposé would harm their image quite significantly.

That said they are not perfect - e.g their wording in their own tracking consent prompts vs the ones they force on others.

reply
> It's a major selling point, for one.

That's marketing. Do you always trust everything in marketing material?

reply
Apple has done more than literally any other technology company to limit their own ability to ever access your personal data.

Always missing from the paranoid lunatic side of this discussion: what devices do you use? I presume you do all your computing on an abacus?

reply
> Apple has done more than literally any other technology company to limit their own ability to ever access your personal data.

Quite a bold statement. How do they compare with technology companies such as proton, signal... ?

reply
It's a bold claim, but the amount of engineering effort that went into eg touchID is to be respected. Proton and Signal are important, but they're tiny in comparison.
reply
Personally I don't deny those claims. I question their motive. Most people don't care much about anything except camera/microphone/location access, so why invest so much into engineering all of these solutions? Are they just morally superior to others? Or are they using the reputation they created for themselves to justify locking down their platforms? Because there are things only Apple can be trusted with?
reply
They sell their own products to you and that’s all they care about. Google, Meta, Amazon and others want to collect a profile on you in order to target ads or more products to you.

With Apple, you are the customer. With others, you’re the product. It’s an easy differentiator for them, plain and simple.

reply
It’s more of a fun anecdote, but people forget that there was once a plague of stolen Apple devices. Apple customers were frequently targeted by pickpockets, etc. because of the value of the devices. I have no evidence but I’ve always believed this was the root of the privacy focus - Apple could lock devices to biometrics and eliminate various workarounds, making stolen devices worthless, and the thefts evaporated practically overnight.

Phone theft is a growing problem again, but it’s still less common than it was because they need to get an unlocked device, and I don’t hear them targeting Apple in particular.

reply
Apple has their own ads and personalization is enabled by default. Why not make it opt-in?

> They sell their own products to you and that’s all they care about.

You can also extend this to say that they want you to only buy their devices/services. If you have an iPhone then non-Apple smart watches are missing basic functionality such as replying to text messages. Force everyone to use Safari and limit it's functionality to force apps onto the App Store (30% cut!).

reply
Now you’ve pivoted to an entirely different conversation.
reply
No, I explained my thoughts on how I think they are connected in a comment about that one. One that you replied to.
reply
> Apple has done more than literally any other technology company to limit their own ability to ever access your personal data.

I mean, it's what they _say_ they do. Do we know?

reply
What's the claim here, that they are doing nefarious things that are undetectable? Because we know that this is probably the most scrutinized tech company on the planet, and we know that they've been caught and penalized for errors in the past.

Do you have any evidence to present, or is this pure FUD?

reply
[flagged]
reply
Having spent a lot of time in the open source world, I'm aware of the concept that I can never know for sure if I can't see the code. (And even if I could, that wouldn't tell us with certainly how that the data that code creates/captures is used by the people using it.)

But I do think that, in general, Apple tends to be the least-bad actor among its mainstream competitors: its primary business model does not depend on harvesting and selling data, and it has made this value proposition a part of its marketing, and people high up in the company have spoken about ways that they personally value it. And, for any story about ways in which Apple has failed here, there are certainly twice as many for any other company they compete with.

I mean, step back: Who cares more about my privacy - Apple or Google? Apple or Roku? Can anyone seriously argue the latter for either?

> I'm only asking if people put faith in Apples claims because they're, well, Apple, or do we _know_ their claims are valid.

If we _know_, then there would be no need for faith. Given the lack of options and the lack of certainty, people must place their faith somewhere (or take on a lot of technical burden to roll their own); given everything I've seen, it's more reasonable to place faith in Apple than basically anyone else in "Big Tech" in this regard.

(But again: if there's a product out there that is very similar to Apple TV in every way except that it is more private: please tell me what that product is. I'd be thrilled to consider it.)

reply
[flagged]
reply
If you read my lengthy reply and came away with "this guy hates to question Apple", you are not reading my reply at all.
reply
> "HN apparently hates"

Please don't fulminate. Please don't sneer, including at the rest of the community.

HN is countless different people with the full range of views on most topics. “It” doesn't hate (or love) any one thing, and these kinds of comments insinuating that it is one entity with one view are so lame. Please observe the guidelines if you want to participate here.

https://news.ycombinator.com/newsguidelines.html

reply
HN hates when people are “just asking questions” but haven’t bothered to make any attempt whatsoever to answer those questions.

Yes, Apple has actually put work into designing, building, and shipping secure enclaves. Yes, they have put a gargantuan amount of work into PCC to uphold the claims they make about its privacy. Yes, they employ differential privacy. Yes, they have shipped a feature that enables privacy-conscious users to be the only ones to hold the keys to their iCloud account. And on and on and on. Nothing will ever be enough for you.

You aren’t asking these questions in good faith. If you were, you’d have your answers already.

reply
> HN hates when people are “just asking questions” but haven’t bothered to make any attempt whatsoever to answer those questions.

I have and don't see much evidence at all except a bunch of influencers saying Apple is tops in privacy.

Apple has plenty of default settings gaps that allow THEM to collect your data. They capitulate in certain markets. And who knows what Trump made them do?

reply
You don’t like the answer you got, so you ignore it. Again, you’re not asking in good faith. The fact that Apple has actually done these things is widely agreed upon by privacy and security experts, and there is essentially no evidence that contradicts it.
reply
They invited security researchers to inspect their implementation of Private Cloud Compute. I expect there’d be a news story worth a good amount of traffic if they said it and didn’t allow people to do so. That there has been no such story suggests that there hasn’t been scandal.
reply
It's paranoia now to question a 4 Trillion dollar company?

I presume truth and facts are important, no?

reply
It’s paranoid lunacy to ignore the irrefutable, demonstrable work that they’ve done to minimize the data they can ever collect or access while conveniently ignoring the miserable track record of every one of their competitors, and to ascribe intentions to them that are in direct conflict to every intentional action they’ve taken in at least the past decade.
reply
You can't install an app on an Apple phone without telling Apple, and you can't get your location on an Apple phone without sending that location to Apple. None of their competitors have this problem.
reply
> You can't install an app on an Apple phone without telling Apple

This is a funny one because users need to opt-in to sharing app install analytics with app developers. You don't get to opt-out of sharing it with Apple, even if you're installing apps from a third-party app store!

reply
No, but when they make claims in marketing material and then lie, it opens them to huge liability. So there is an enforcement path.
reply
deleted
reply
I trust that when they don’t do it perfectly, a million nerds are going to scream “finally! Gotcha!”

…while running far worse stuff themselves, the whole time.

reply
Yet, most people fall for the E2E-encrypted iMessage story, while the Messages are only encrypted at rest when you have iCloud Backup enabled (I’d guess most people) and ADP disabled (I’d guess most people). The fact that I have ADP enabled doesn’t matter because most people I communicate with don’t have ADP enabled (or know what it is).

This is all only mentioned in the footnote of an iCloud security document [1].

Apple cares about your privacy, so much that they made a backdoor through bad defaults, well in reach of the CLOUD Act.

[1] Footnote 9 in https://support.apple.com/en-us/102651

reply
> Yet, most people fall for the E2E-encrypted iMessage story,

Most people don't even understand that when their favorite app that says E2E that that app still has access to the clear text before it's encrypted...

reply
Yeah, you have to trust the app. The point is that they don’t have to do anything nefarious in their app, because there already is a gaping hole in the system.
reply
Apple perceives itself as a prestige brand. That perception depends upon consistently high execution and a perception that they’re trying to create beautiful experiences for users.

They want the device to be a mechanism for you to purchase things. Hence the “Apple card” and all the hullabaloo around that. You’ll only use your phone if you perceive it to be secure. Apple’s investments in Secure Enclave’s, sandboxing are all directly linked to their belief that this will help the consumer perceive the safety of the product- and again, it goes back to the perception of the brand.

Quality craftsmanship has properties that outsiders can perceive- even if they don’t understand it. Apple makes those investments.

Google- well, they just make things and then abandon them. Android’s bizzaro world open source is a chaotic mess that reflects the lack of discipline in Google’s leadership.

reply
Yes, they make great devices. I have many. But do we _know_ that what they claim is fact?

And I don't know what Google has to do with this.

reply
[flagged]
reply
My question is what do you connect this TO that doesn't spy. I get you can use a Smart TV and switch to HDMI input but there's no guarantee the TV is not spying on you in some way, if not today then tomorrow these things will come with eSIM support to upload ACR data even when 'disconnected' or connect to your smartphone over some ad tech protocol to do the same.
reply
Yeah, this is certainly already a problem.

I trust Apple for a number of reasons, but I really had to be really aggressive about the TV it’s connected to.

But also, a smaller footprint is a smaller footprint. I’ll take “better” where I can get it.

reply
Today, just don't connect your smart TV to a network, and you should be fine. (Assuming there's no open/passwordless WiFi networks nearby.)

If/when devices start shipping with cellular modems and eSIMs... honestly not sure. Faraday cage? Physically remove the modem? (If that doesn't prevent the device from booting.)

reply
..: Surely the specs (or … whatever compliance paperwork, CE etc?) of the device have to state if it includes a modem or not?

If it does then don’t buy it?

reply
Apple has their own ad targeting program, and they only need to seem to deliver privacy.
reply
If you want privacy (or anything for that matter), the only way you're going to get it is by user choice. A device that doesn't let you install your own apps is not going to deliver what you want.
reply
You can install your own apps on a Samsung Galaxy.

For privacy, I'd recommend hardware with as few blobs as possible and of course an unlocked bootloader.

reply
I don’t trust them for privacy. I like them for the lack of annoyance. All their competitors seems to want to hinder any activity I want to do. Ads, nagging, notifications, … It’s basically a mental tax.
reply
> and has the best track record.

https://www.reuters.com/legal/apple-pay-95-million-settle-si...

    Apple routinely recorded their private conversations after they activated Siri unintentionally, and disclosed these conversations to third parties such as advertisers.
Yeah, great track record there.
reply
How does this one instance refute the argument you quoted?
reply
You will never silence the paranoid lunatics who come out in droves whenever Apple is discussed.

The only standard they will accept is absolute perfection. It doesn’t matter all of the drastic steps they’ve taken to ensure that past mistakes are never made again or that their hands are tied when governments make demands of them in the future. It doesn’t matter that they’re demonstrably orders of magnitude better than everyone else.

reply
> The only standard they will accept is absolute perfection.

Only for internet comment purposes. I’ve found that these same jabronis actually tend to run crappy and wildly unsafe home rolled kludges, for themselves.

reply
Hopefully you do understand what "track record" means, especially when it isn't really a clean one.
reply
And do you understand what "best" means?
reply
> and has the best track record

Or maybe they are just not caught yet. They are now running ads, where is the data coming for that. They stop others from using the APIs but nothing stop their first party apps to snoop and use the data.

Apple AirTag is the biggest privacy nightmare out there and I am not sure why people keep Apple separate from other data hungry companies

reply