512: Owned With a P
https://atp.fm/512

Major new iCloud security features, more App Store price tiers, updates on Mastodon and Blackbird, and the wonderful world of printers.

Accidental Tech Podcast: 512: Owned With a P

Three nerds discussing tech, Apple, programming, and loosely related matters.

@atpfm this the ep that finally made me finish this mastodon process, and so this is my first… aw hell, what are they if not toots?
@KristinaWhitsell @atpfm yep same, this one got me to download mastodon, now eagerly awaiting the Ivory general release
@atpfm Put that title in the Top Ten of ATP titles.
@atpfm The only people that don't have printer problems are the people that don't use printers.
@atpfm FWIW, Hachyderm has been running great since it’s migration! Super fast and responsive 👍🏻
@atpfm @caseyliss @marcoarment @siracusa How can I watch the Members feed on Spotify? The authorisation which Stratechery uses works, but not ATP. Why Spotify, it works on my Intel Mac and on my Sonos and Alexa voice boxes…. Sorry.
@RobLee Can you subscribe to arbitrary feed URLs in Spotify? If so, copys/paste the members feed URL from your member page on atp.fm
@siracusa unfortunately not, Spotify only allows feeds it’s published. There is some method which Stratechery uses which allows the sign on to work. I believe it’s called passport.
@atpfm Could just be a coincidence, but think this is the first ATP post where the Mastodon replies clearly outnumber Twitter’s (only one reply there for now)
@atpfm RE: Advanced Data Protection & China; AFAIK Apple has never stated they let China use their (Apple’s) key. In China Apple may give them a key copy to everything and they can be “honest” about enabling ADP in China by just deleting their own. Apple won’t be able to restore your backups for you, but China could still access everything.
@atpfm RE Apple E2E Encryption: I am a little curious of how this works with previously encrypted data. @siracusa mentioned there not being some huge process that re-sncrypts things which got me wondering about implementation details. Is Apple just basically theowing away their copy of the key once you enroll? If so it seems they are relying fairly heavily on the assumption that key has never been copied / misused. Maybe this is perfectly a reasonable assumption?
@atpfm @siracusa I see, I think you guys even read this part of the support article but I didn’t internalize it until now. It says exactly that the keys are removed from the HSMs. https://support.apple.com/guide/security/advanced-data-protection-for-icloud-sec973254c5f/web
Advanced Data Protection for iCloud

iCloud uses best-in-class security technologies and employs strict policies to protect user data.

Apple Support
@claytonandersen If you don’t trust Apple to do this right, then you probably shouldn’t trust Apple with any of your data. Trusting Apple to implement things correctly is unavoidable.
@siracusa yeah totally agree, I was more surprised that they trust themselves but I guess they must have pretty tight restrictions around those HSMs and what a person could so with one which makes sense.

@atpfm I’m enjoying the discussion on AI art on this episode and on @siracusa recent Upgrade appearance. I’m not sure if you ever watch Corridor Crew, on this project they use AI tools to create a “Spiderverse fan film”. https://youtu.be/QBWVHCYZ_Zs
They even discuss the ethical implication of using these tools, though its up to you to decide if you agree with their conclusion.

As a musician, it also reminds me of the discussions we’ve been having around the usage of samples for the last ~20 years.

We Put TOM HOLLAND into the SPIDERVERSE

YouTube