Apple removes data protection feature in the UK.

Apple has just canceled its most advanced encryption feature for cloud data in the UK, an unprecedented move in response to government requests for access to user data.

This change affects the Advanced Data Protection (ADP) feature, which extends end-to-end encryption across various cloud data types. Apple says this feature is no longer available in the UK for new users, who will receive an error message starting February 21st, and existing users will eventually need to disable this security feature.

Apple has just removed its most advanced encryption feature for cloud data in the UK at the request of the UK government.

This move means that iCloud backups in the UK will no longer have that level of encryption, allowing Apple to access user data in some cases where it would otherwise be unable to, such as copies of iMessages, and to hand them over to authorities if legally required to do so. When end-to-end encryption is enabled, even Apple cannot access the data.

"Apple's decision to disable this feature for UK users may be the only logical response at this point, but it leaves users at risk of data leaks and deprives them of a crucial privacy-protecting technology," said Andrew Crocker, director of oversight at the Electronic Frontier Foundation.

Governments and major tech companies have long been locked in a battle over strong encryption to protect users' communications, which authorities view as a significant obstacle to mass surveillance and crime prevention programs.

Initial plans to allow Apple users to fully encrypt their device backups to the iCloud service were canceled around 2018 following an FBI complaint, but the company eventually resumed implementation in 2022.

"Legal access to digital evidence and threat intelligence is rapidly eroding," the U.S. Federal Bureau of Investigation stated on its website.

Apple has long stated that it would never build so-called backdoors into encrypted services or devices, because once created, they could be exploited by non-governmental hackers, a view shared by security experts.

"Ultimately, once a loophole is in place, it's only a matter of time before it's discovered and used maliciously. Removing ADP isn't just a symbolic concession, but a real weakening of iCloud security for UK users," said Oli Buckley, Professor of Cybersecurity at Loughborough University in England.

Data that was encrypted before Apple launched its protection service in late 2022, such as passwords and messaging services like iMessage and FaceTime, will remain encrypted.

This change doesn't affect the encryption of data stored directly on the device, but in the age of large photo collections, massive messaging histories, and frequent phone upgrades, many users find it impractical to store all their data solely on their device.

Storing data solely on the device also means that if the device is lost or damaged, all of the user's data could be lost, which has led many, if not most, consumers to opt for some form of cloud backup that is now more easily accessible to UK authorities.

Source: https://www.baogiaothong.vn/apple-go-bo-tinh-nang-bao-ve-du-lieu-tai-anh-192250222110123893.htm