MacDirectory magazine is the premiere creative lifestyle magazine for Apple enthusiasts featuring interviews, in-depth tech reviews, Apple news, insights, latest Apple patents, apps, market analysis, entertainment and more.
Issue link: https://digital.macdirectory.com/i/1488864
Apple and the high-risk user Most computing platforms are built with the average user in mind. But over the past few years, it has become clear that in terms of cyber risk, not all computer users are the same. Journalists, activists, and people living in authoritarian regimes all face extraordinary cybersecurity threats—often from extremely well-resourced nation-state actors and the commercial spyware industry that serves them. To address the unique needs of high-risk people, Apple is introducing two powerful new data protection features for its platforms. iMessage Contact Key Verification is a feature that prevents bad actors from using advanced tactics to insert themselves into end-to-end encrypted communications. It helps high-risk users “verify that they are messaging only with the people they intend.” As Apple explains the feature: Conversations between users who have enabled iMessage Contact Key Verification receive automatic alerts if an exceptionally advanced adversary, such as a state-sponsored attacker, were ever to succeed breaching cloud servers and inserting their own device to eavesdrop on these encrypted communications. And for even higher security, iMessage Contact Key Verification users can compare a Contact Verification Code in person, on FaceTime, or through another secure call. Security Keys for Apple ID is another security feature aimed at high-risk users—and especially people who are more likely to face sophisticated attempts to breach or take over their accounts. It is essentially a beefed-up version of two-factor authentication that requires a hardware security key—arguably the gold standard in terms of 2FA implementations—to be used as one of the Apple account holder’s authentication factors. iCloud security and privacy gets a boost Apple also introduced a data protection feature aimed at all users: Advanced Data Protection for iCloud lets people protect the majority of their iCloud data with end-to-end encryption (E2EE). At present, only highly sensitive iCloud data—think Keychain, Health, and payment data—is protected via E2EE. With Advanced Data Protection, users will be able to expand this protection to the following categories as well: • iCloud Backups • iCloud Drive • Photos • Notes • Reminders • Safari Bookmarks • Siri Shortcuts • Voice Memos • Wallet passes