UK government orders Apple to open a backdoor into all encrypted iCloud accounts

Cal Jeffrey

Posts: 4,369   +1,522
Staff member
WTF?! It's ironic how, in the information age, governments slap hefty fines on companies for not adequately securing user data but, in the same breath, demand that these companies give state agencies unrestricted access to the very same data. No matter what country you are from, warrantless mass surveillance is wrong. George Orwell's 1984 was a warning, not an instruction manual.

The British government has ordered Apple to allow blanket access to user data stored online. The "technical capability notice" demands a backdoor into its encrypted iCloud services, which state agencies can use to access backups of any global customer without a court order. The UK Home Office issued the decree under the Investigatory Powers Act of 2016, aptly referred to as the "Snoopers' Charter."

The UK's Investigatory Powers Act allows agencies to compel technology companies to assist in intercepting and obtaining communications data. While it is meant to expedite criminal investigations, the notice Apple received extends beyond targeted data requests. Instead, the government wants full access to all encrypted information. The demand challenges Apple's Advanced Data Protection feature, which ensures only validated users can access their data. Even Apple personnel cannot decrypt customer accounts.

The Irish Sun asked Apple for comment, but a spokesperson said that the company could not legally reveal details of the notice. A representative for the UK's Home Office was equally reluctant to share.

"We do not comment on operational matters, including, for example, confirming or denying the existence of any such notices," the spokesperson said.

Apple has consistently maintained a firm stance on user privacy, asserting that it will not create backdoors into its products. It prominently fought the US government over the same issue multiple times after receiving demands from the FBI insisting it crack the phones of suspected criminals.

As it has in the past, Apple has indicated a refusal to comply with the order, suggesting it might withdraw certain security features from the UK market rather than compromise its global security standards. It is too early to tell if Cupertino's counterproposal will sway UK officials. However, it is most certainly to gain support from British iPhone owners, who will likely apply pressure against this invasion of privacy.

Critics argue that obliging Apple to create a backdoor could set a dangerous precedent, potentially leading other countries to demand similar access. This situation has global cybersecurity implications and likely conflicts with other nations' privacy laws. Civil liberties group Big Brother Watch calls the order a severe threat to privacy rights and has called for its withdrawal.

"We are extremely troubled by reports that the UK Government has ordered Apple to create a backdoor that would effectively break encryption for millions of users," said Rebecca Vincent, Big Brother Watch's interim director of privacy. "[This is] an unprecedented attack on privacy rights that has no place in any democracy."

Apple is not the first firm to face the UK's controversial stance on encryption. In 2023, encrypted messaging companies WhatsApp and Signal threatened to exit the UK market rather than compromise encryption protocols. This newest development against Apple could further strain relationships between the UK government and technology firms.

Image credit: Electronic Frontier Foundation

Permalink to story:

 
The extra creepy thing about this is that the British gov wanted back doors on all encrypted iCloud users, not just British ones. Someone really needs to explain to them that if Apple can be pressured into giving back door access to the British gov, the US, China, or even the dastardly French will soon want their own back doors on iCloud accounts used by British citizens & even British government employees.
 
Looks like they want another fappening to happen.
Needless to say, someone will find a good use for this.
I assume Apple already gives access to accounts
suspected in crimes. Having access to all of them at any given time
is too much. I am sad to see UK like this.
 
They're also trying to do the same for all Bank Accounts in the UK, Tory's started that, Labour are taking it a step further and will apparently use an automated system that just takes money from your account if said system decides you owe tax, or taking benefits you don't deserve, or it decides you got the money illegally somehow.

Now they're asking for backdoors into iCloud (and probably all the other cloud providers as well), they've tried to ban encryption as a whole in the past.

I genuinely have no idea what the UK will look like in 10 years time, honestly, nobody here seems to really care if they're getting walked all over, taxed to death, paid peanuts.

The worst part is, there is absolutely no good party to vote for to make any real change, Labour/Tory's are just as bad as each other, it's close to impossible to see any differences, Greens are against nuclear or defense in general and have some fairly unworkable policies, Lib Dem's have similar issues, Reform UK are going to get rid of the NHS and make it an American type system, not deal with immigration and have almost no plan for anything else. Absolutely screwed.
 
I gave ChatGPT the article and asked how should Apple react in this case and here is the answer:

In this case Apple should pursue legal action against the UK government at the International Criminal Court (ICC), but it would need to frame the charges in terms of violations of international law. Apple would likely need to focus on broader human rights violations and potential abuses of power. Here are five potential charges:

1. **Violation of the Right to Privacy (Article 17, International Covenant on Civil and Political Rights)**
- **Explanation:** The UK government's demand for unrestricted access to user data without a court order violates individuals' right to privacy, which is a fundamental human right.

2. **Arbitrary Interference with Privacy, Family, Home, or Correspondence (Article 17, Universal Declaration of Human Rights)**
- **Explanation:** The demand for blanket access to encrypted data constitutes an arbitrary interference with the privacy of millions of users, which is prohibited under international human rights law.

3. **Abuse of Power (General Principle of International Law)**
- **Explanation:** The UK government's use of its authority to compel a private company to create a backdoor into its encryption systems could be seen as an abuse of power, undermining the principles of democracy and rule of law.

4. **Violation of Freedom of Expression (Article 19, International Covenant on Civil and Political Rights)**
- **Explanation:** The demand for unrestricted access to data could potentially chill freedom of expression, as individuals may self-censor if they believe their communications are not secure.

5. **Violation of the Right to Freedom from Arbitrary Detention (Article 9, International Covenant on Civil and Political Rights)**
- **Explanation:** While not directly related to detention, the broad surveillance powers could be used to arbitrarily detain individuals based on intercepted data, violating their right to freedom from arbitrary detention.

These charges highlight the potential human rights implications of the UK government's actions. However, it is important to note that the ICC has a specific mandate and jurisdiction, and Apple would need to demonstrate that these actions constitute crimes within the ICC's purview.
 
I'm sure whichever other countries have already hacked into the UK's systems, as well as other random hackers, will greatly appreciate this expanded access to UK's citizens, lawmakers, judges, reporters & editors, business leaders, and other influencers. So much more convenient to have a one stop shop than spy on them individually. Not to mention whatever interns or other employees who want to spy on their neighbor, girlfriend, or celebrity crush. Oh, and removing any justification for Apple not offering other countries the same deal.

What was wrong with requiring a warrant again?
 
I am not surprise by this. I recently enabled Advanced Encryption on my iCloud account if this is allowed, will set the precedence for the US government to do the same thing.
 
Just remember guys, nothing is stopping you from building a NAS and creating your own cloud.

I thought about doing this because I am tired of steaming fees. Might reconsider implementing this and building out a custom home network to better secure personal data
 
Times like this I'm feeling smug that I don't put my whole life on a smartphone. All my data is on my own storage devices at home under my control.
 
This isn't just about the UK—if Apple caves, it sets a precedent for governments worldwide to demand the same. Encryption only works if it's airtight; once you create a backdoor, it’s only a matter of time before it’s exploited, whether by hackers or authoritarian regimes. The ripple effect here is massive.
 
"UK government orders Apple to open a backdoor into all encrypted iCloud accounts"

Order All You Want... Not Gonna Happen...!
 
Back