• wulrus@lemmy.world
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    13 hours ago

    There is absolutely no legitimate reason to implement “cloud” storage or backup in a way that does not encrypt on the client side, with open, verifiable standard if not open source for the client software, in such a way that it can’t be read by the provider.

    I remember when I got PGP mid 90s and thought: Wow, in 6 months, everybody will use it! Yet it never caught on. User stupidity, elitism or a bit of both?

    At the height of pre-encryption WhatsApp I remember talking about PGP to some younger relatives about the problem of intercepted messages, and they had a hard time believing that we had “access to that kind of technology” in the 90s.

    Somehow, they managed to normalise sending your stuff out there based entirely on trust in corporations and governments, although the problem was solved technically long ago.

    Problem is: They fight back by introducing “convenience” that only works in clouds they can access, such as “AI” in Google or Apple Images. E. g. you can enter “cat” and it will show all your cat photos.

    But I got to admit that I TALK a lot about a switching to a self-hosted image solution such as PhotoPrism, but lack in execution, other than putting it on my todo-list.

  • Nikls94@lemmy.world
    link
    fedilink
    arrow-up
    4
    ·
    2 days ago

    iCloud backup is encrypted if the option is chosen. It’s deactivated by default. The backup is linked to the signature of your devices, or a phrase you are only shown once when activating it. AFAIK it’s secure until now.