I love this topic because it is right in my wheelhouse!
There’s one news that I’m frustrated it is not receiving enough press coverage:
Security officials in the United Kingdom have demanded that Apple create a back door allowing them to retrieve all the content any Apple user worldwide has uploaded to the cloud…
The British government’s undisclosed order, issued last month, requires blanket capability to view fully encrypted material, not merely assistance in cracking a specific account, and has no known precedent in major democracies.
The basic facts of this are:
- The UK government ordered Apple to provide a backdoor to bypass the end-to-end-encryption of your iCloud files protected by their Advanced Data Protection.
- The UK government wants to see EVERY user’s protected iCloud files, including Americans, Australians, Europeans… basically the WHOLE WORLD!!
- This is a SECRET order by the UK government. Apple is not allowed to disclosed that this order even exist.
- If you are targeted by the UK government to see your encrypted iCloud files, Apple is forbidden to inform you.
Advanced Data Protection (ADP) is deliberately engineered by Apple such that it is IMPOSSIBLE for even them to see what your iCloud files are. The UK government’s order basically wants Apple to re-engineer their servers and operating system to bypass or break the end-to-end-encryption.
Even if you’re not an Apple user, this issue will affect you. If the UK government can SECRETLY coerce Apple to do that, they can also coerce Google and Microsoft to do the same.
The good news is that US lawmakers are doing something about it to thwart the UK government’s secret order:
https://www.washingtonpost.com/technology/2025/02/13/apple-uk-security-back-door-adp/
What is not clear are the measures the US government will take to thwart the UK government’s order. Depending on what the measures are, the question is this: will they only protect Americans? Or will it benefits all Apple users regardless of nationality?
What can you do?
As suggested by Glenn, switch to Linux and GrapheneOS. And I will add that you roll your own cloud solutions like NextCloud. But there are heavy prices for you if you go for the DIY route.
For one, setting up your own cloud solutions like NextCloud will mean that you’re responsible for your own cybersecurity. Last year, NextCloud had to issue an emergency cybersecurity patch to prevent hackers from breaking in. If you are going to host your cloud files in your own home’s network, you have to secure your home network as well. And then, the traditional insurance risk of fire, flood, natural disaster and theft applies.
Switching to GrapheneOS is a pain as well. I’ve looked through their documentation on their website to access how feasible it is for the everyday folks to switch to them. Examples of the pain points are:
- App notification will not work as reliably. Or if you want it to work, you have to pay a price in terms of battery life. App notification works so beautifully because it has to go through Apple/Google’s notification servers. If you want privacy, you have to take the notification server out of the picture. Consequently, you can’t have nice things like notifications.
- Your favourite apps may not exist in the GrapheneOS. If you want your favourite apps, you have to set up a Google Play service in your GrapheneOS phone. It’s a hassle, and if you want it, you will need a Google account. That defeats the purpose of having a de-Googled phone in the first place.
- Some banking apps will not work because of their anti-tampering mechanism will freak out inside the GrapheneOS environment.
GrapheneOS is excellent for privacy. They’re structured as a project/organisation so that they cannot be forced with a legal order as a company. But it is EXTREMELY painful and inconvenient to use it. It takes significant amount of effort, change of habits, technical knowledge and sacrifice of convenience to implement. There is going to be significant teething problems.
For those technical people who have the time, it may be feasible to work out all the problems and issues and come up with workarounds. But for most non-technical folks, it may not be a feasible option.
And also, the most convenient way to use GrapheneOS is to buy a Google Pixel phone and follow their technical instructions to install it over your Pixel phone. Hopefully there is no backdoors in the Google Pixel phone too!
As for Linux…
As for Linux, the question is, which Linux? Ubuntu Linux? SUSE Linux?
Linux is open-sourced. But conveniently-packaged Linux distributions like Ubuntu is from a corporation, Canonical.
The question I have is this: what is stopping rogue governments like the UK government from issuing secret orders to Canonical to backdoor their Ubuntu Linux?
Rabbit hole
I know all these considerations are a massive rabbit hole to go into. I wish I have easy answers, but I don’t think any exist. As Chris said before, there’s no solutions. Only trade-offs.