ICloud: Difference between revisions

In August 2014, iCloud passwords were brute forced, enabling many celebrities to have their nudes leaked<ref>https://en.wikipedia.org/wiki/2014_celebrity_nude_photo_leak</ref>. Apple downplayed the event by denying any iCloud breach occurred<ref>https://www.theverge.com/2014/9/2/6098107/apple-denies-icloud-breach-celebrity-nude-photo-hack</ref>, but the root cause was still unaddressed by the next year<ref>https://www.ibtimes.co.uk/icloud-accounts-risk-brute-force-attack-hacker-exploits-painfully-obvious-password-flaw-1481623</ref>.

In 2018, Apple moved Chinese users' data to be hosted in Chinese servers, a move said to grant the Chinese government access to"emails, photos, documents, contacts and locations" of Chinese users<ref>https://thehackernews.com/2021/05/how-apple-gave-chinese-government.html</ref>. While the data remains encrypted, the encryption keys were also moved to Chinese servers<ref>https://thehackernews.com/2021/05/how-apple-gave-chinese-government.html</ref>. Apple claims this only affects Chinese citizens living in mainland China, but provides no insight on how this distinction is made, or clarity on whether tourists visiting China will have their data uploaded to the Chinese servers<ref>https://support.apple.com/en-us/111754</ref>.