TechCrunch News 03月06日
UK quietly scrubs encryption advice from government websites
index_new5.html
../../../zaker_core/zaker_tpl_static/wap/tpl_guoji1.html

 

英国政府近期从其网站上悄然删除了有关加密的建议,此前该国政府曾要求苹果公司提供对其iCloud云存储服务的加密数据的后门访问权限。安全专家发现,英国国家网络安全中心(NCSC)不再建议高风险个人使用加密来保护其敏感信息。此前,NCSC曾建议律师等法律专业人士使用苹果的“高级数据保护”(ADP)等加密工具,但现在该页面已重定向到另一个不提及加密或ADP的页面,转而推荐使用苹果的“锁定模式”。这一举动发生在英国政府秘密要求苹果公司建立后门以访问用户加密的iCloud数据之后,苹果公司已停止在英国推出ADP功能,并正在调查权力法庭(IPT)中对英国的数据访问命令提出质疑。

🔒英国国家网络安全中心(NCSC)悄然删除了此前向律师等法律专业人士提供的加密建议,包括使用苹果的“高级数据保护”(ADP)等工具,该工具能为iCloud备份提供端到端加密。

🚨取而代之的是,NCSC现在建议高风险个人使用苹果的“锁定模式”,这是一种“极端”安全工具,会限制对某些功能和特性的访问。此举被安全专家Alec Muffet发现,他指出原始文档已从互联网上被“完全删除”。

🍎在删除加密建议之前,英国政府秘密下令苹果公司建立一个后门,允许当局访问用户加密的iCloud数据。随后,苹果公司停止在英国推出ADP功能,并确认现有用户最终需要禁用它。

⚖️目前,苹果公司正在调查权力法庭(IPT)中对英国的数据访问命令提出质疑。这一系列事件表明,英国政府在加密问题上的立场发生了重大转变。

The U.K. government appears to have quietly scrubbed encryption advice from government web pages, just weeks after demanding backdoor access to encrypted data stored on Apple’s cloud storage service, iCloud. 

The change was spotted by security expert Alec Muffet, who wrote in a blog post on Wednesday that the U.K.’s National Cyber Security Centre (NCSC) is no longer recommending that high-risk individuals use encryption to protect their sensitive information.

The NCSC in October published a document titled “Cybersecurity tips for barristers, solicitors & legal professionals,” that advised the use of encryption tools such as Apple’s Advanced Data Protection (ADP). 

ADP allows users to turn on end-to-end encryption for their iCloud backups, effectively making it impossible for anyone, including Apple and government authorities, to view data stored on iCloud.

The URL hosting the NCSC document now redirects to a different page that makes no mention of encryption or ADP. Instead, it recommends that at-risk individuals use Apple’s Lockdown Mode, an “extreme” security tool that restricts access to certain functions and features.

Muffet reports that the original document, still accessible via the Wayback Machine, has been “wholesale deleted from the internet.” TechCrunch wasn’t able to find any encryption advice on the U.K. government’s website. 

The U.K. Home Office and NCSC did not respond to TechCrunch’s questions.

The removal of the encryption advice comes weeks after the U.K. government secretly ordered Apple to build a backdoor that would give authorities access to users’ encrypted iCloud data.

Following the order, first reported by The Washington Post, Apple pulled its ADP feature in the U.K., and confirmed to TechCrunch that the feature will no longer be made available to new users in the U.K., and its current users would eventually need to disable it.

Apple is challenging the U.K.’s data access order in the Investigatory Powers Tribunal (IPT), The Financial Times reported this week. 

Fish AI Reader

Fish AI Reader

AI辅助创作,多种专业模板,深度分析,高质量内容生成。从观点提取到深度思考,FishAI为您提供全方位的创作支持。新版本引入自定义参数,让您的创作更加个性化和精准。

FishAI

FishAI

鱼阅,AI 时代的下一个智能信息助手,助你摆脱信息焦虑

联系邮箱 441953276@qq.com

相关标签

加密 英国政府 苹果 数据安全
相关文章