Hacker News new | past | comments | ask | show | jobs | submit login

Nobody's reported seeing that sort of network traffic sent off of iOS devices. It's trivially easy to spot it, and it's well documented, going to Google and others across the web, though.



On my iPhone, Safari browser history synchronization to iCloud was enabled by default.


According to Apple, Safari history and bookmarks are end-to-end encrypted and Apple cannot read them:

https://support.apple.com/en-us/HT202303

Is there any evidence that Apple is lying, and is actually decrypting them somehow and using them for advertising purposes, rather than for the "coherence" feature?

I don't actually want browsing sessions to be unified across devices, so I do wish that it was turned off by default. (Though being able to close tabs remotely is a sort of interesting capability.) However, it doesn't seem to be actual spyware used for advertising or tracking purposes.


That’s not what your link says. The link says browsing history is end-to-end encrypted, but Bookmarks are not.


> " It's trivially easy to spot"

Is it? How exactly are encrypted payloads to a secure, opaque and generic endpoint easy to distinguish?


It's trivially easy to spot it going to Google/FB/whoever if you visit a page with a GA or FB or whatever pixel. That's part of the second sentence, not the first.

For spotting it going to Apple you'd have to do more fancy correlation over time and such, but you can find people out there who are researching this stuff... so that's who I'm waiting for to hear more from.


Safari on iOS is auto-completing stuff as you type. The option to search with google comes up if you get far enough.

And it’s not going to google first. If you type an address the “link” at the top is to Apple Maps. They seem to do a similar thing with place names. I’m not sure but one can be fairly certain they’re using the phones location to help….


You will have no idea what is being carried via encrypted channels to Apple's opaque backend servers.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: