Signal has long said it'd "rather shut down or leave a market" than add a backdoor or weaken its encryption.

Apple also had this option when it was ordered by the UK government to build an iCloud backdoor. Apple could have said — without violating secrecy laws — why it was leaving the UK, rather than weaken the security of all of its UK customers.

Instead, Apple capitulated to the demand to keep operating, and prioritized its profits over its customers' security.

https://techcrunch.com/2025/02/21/apple-pulls-icloud-end-to-end-encryption-feature-for-uk-users-after-government-demanded-backdoor/

Apple pulls iCloud end-to-end encryption feature for UK users after government demanded backdoor | TechCrunch

In an unprecedented step, Apple caved to a reported U.K. government’s demand to prevent users from using end-to-end encryption in iCloud.

TechCrunch
@zackwhittaker why not put it another way? Apple has been transparent on what's happening (not their doing). UK customers can decide whether they want to continue as is from now on, or simply leave the ecosystem.
Misuse Case (@[email protected])

Instead of having secret backdoored #e2ee or being in a position where they might end up providing that…Apple is making it very clear to users in the #UK that they can’t really provide E2EE, and it’s because of the UK’s government. Full disclosure. If people want to maintain their #privacy they need to use something else. (And/or pester their government to change the snooping laws they have.) 3/?

TWiT.social
@david @zackwhittaker
The problem is that Apple blocks you from using other cloud services to sync 3rd party apps. Even in non-Apple apps they are grey out. iCloud is the only option.
@zackwhittaker Weird to compare Apple and Signal. Also, how would leaving the UK market help Apple UK customers who don’t use ADP. It’s an optional feature.

@zackwhittaker “caved” into following the law is an odd way of putting it.

Leaving the UK market, and forcing users to move to a competitor who has added the encryption backdoor, is the worst of all worlds.

I’m not sure what else could be done.

@shane @zackwhittaker your argument isn't sound, as you're dealing in hypotheticals, but i like that you're countering what most of this thread is saying.

i would add that abandoning millions of users due to a stupid policy that may ultimately be rescinded is also a bad approach. i can't fault apple here.

@zackwhittaker entirely ridiculous to suggest they abandon paying customers who rely on iCloud services for the backbone of their computing systems - comparing it to signal is a bit odd - Apple explicitly explain that their messaging services, and FaceTime, are unaffected by this requirement and remain e2e encrypted.
@cms @zackwhittaker iMessage transmission is not affected by this, but storage of Messages app (sent and received iMessage, SMS and RCS) is in fact affected by this. Messages in iCloud is not affected, but the more common configuration of Messages stored locally and backed up to iCloud Backup are no longer protected by ADP in the UK. https://support.apple.com/en-us/102651
iCloud data security overview - Apple Support

iCloud uses strong security methods, employs strict policies to protect your information, and leads the industry in using privacy-preserving security technologies like end-to-end encryption for your data.

Apple Support
@cms @zackwhittaker Also without ADP your Messages in iCloud encryption key can be stored by Apple. See footnote 8 in link from the previous post.
@cms @zackwhittaker no point being e2e encrypted if the rozzers can just read your cloudy backup of the content.

@zackwhittaker Given the draconian sentencing of climate protestors and the way that the UK courts are defining protests as “terrorism”, no UK Apple user should have a photo of a protest, or a note expressing any Green sympathy. The same applies to any sympathy for Palestine.

It seems I was safer using Apple in China than I would be in the UK.

@zackwhittaker nothing more expected from "Tim Apple".

@zackwhittaker

Apple is in the business of paying dividends to shareholders.

That's it.

@zackwhittaker it strikes me that you don't really even understand what is happening here. ADS is an optional opt in feature. UK wanted Apple to weaken it by adding a backdoor. Rather than weakening this optional feature, Apple is no longer offering it in the UK. Are you suggesting Apple should entirely leave the UK market even for users not using ADS?

The UK had originally asked for backdoor access to even non-UK citizens using this feature, which Apple is not complying with.

@zackwhittaker and even this concession doesn't let them off the hook. If the "technical capability notice" leaked to the press is correct, they are required to put a backdoor in iCloud encryption *anywhere in the world*. Even the Chinese Communists have not been this brazen in their demands.

Apple employs indirectly 80,000 people in the UK. The only legal way they can rebuff the UK's exorbitant demands would be to pull out of the country completely.

@zackwhittaker People would eat the UK government alive if iPhones disappeared. It would be a valid tactic from Apple to shut down such privacy invading bullshit.
@zackwhittaker Is only up to users to punish big companies, governments can't do anything against his own puppeteer.

@zackwhittaker Can't have a US company not trying to make money. Retreat from the UK is not an option, instead the customer's security is sacrificed to keep the nose in the trough.

Just glad i have no business/products from Apple in the first place. Never liked them anyway.

@zackwhittaker as much as i dislike Apple, and add much as i love the UK, (lived there for 16 years), i think we need to fight the UK government on this and not Apple
@zackwhittaker What choice did Apple have in this? The alternative was building a backdoor and not telling anyone, which I'm sure most would agree is a terrible solution. At least this way we know what the score is and we can choose to not use iCloud any longer (which is what I’m going to be doing), or move away from Apple altogether, (which I might also do). But if I do either of those things, it's because of a decision by the UK government, not Apple.
@Psionmark @zackwhittaker What about go to court? This is fucking outrageous you presenting only two options. Every gov will want the same now.
@alvyntc @zackwhittaker I can’t imagine for one minute Apple didn’t consider that option. After all, it’s not exactly good for business.

@zackwhittaker This shifts the burden of resistance from the company to the users.

I'm not sure I like this better - not all users are educated enough to understand the ramifications, and they don't have the legal resources to fight it.

For a company that wants to profess to have strong privacy standards, this seems like an odd maneuver.

@zackwhittaker The UK is a representative democracy. They elected a government that made one of Apple’s products illegal unless Apple added a secret backdoor. Apple refused, removed the illegal feature, and disclosed the change to their customers. If the people of the UK want encryption without a backdoor, they should vote for a government that supports that next time.
@zackwhittaker Apple is a company beholden to their stock holders. That is all. Expectations otherwise are silly.

@zackwhittaker The Signal comparison doesn't really make sense because Signal has no presence in UK, does not have customers (much less in UK), and will continue to serve people in the UK as a hostile rogue state that infringes basic privacy rights if needed, just like they do in other such states.

Apple on the other hand, as a business, has not set things up to protect the people in hostile jurisdictions who rely on their products in the event that they withdraw. This of course is on them, and on capitalism, but it doesn't admit the same path forward.

@zackwhittaker Apple is a business. Business is amoral and the only pursuit is profit. That is why there are other constructions and legislation.
@zackwhittaker Soon this will evolve into a demand to purge E2EE apps from the App Store.
#apple #ios #iphone #uk

@zackwhittaker
I've been thinking a lot about this hypothetical recently. If you have detailed thoughts, I'd love to hear them!

Ignoring the possibility of an empty threat as a PR stunt, could Apple really leave the UK?

Their website lists 40 retail stores across the UK, representing probably thousands of workers who would need to be laid off. Shuttering all 40 stores would be a large(ish) financial loss; they probably entailed hundreds of millions of dollars (USD) in investment into real estate, building, and furnishing.

And what of the existing customer base? Presumably Apple "no longer operating in the UK" would involve a complete ceasing of all support, which would probably violate UK waranty laws. Plus, what happens when a UK citizen’s iPhone breaks? They might be able to go over to France or Ireland to get it fixed, but from my experience, the international warranty policies are a bit of a mess.

Apple would obviously have to shut down iCloud completely within the UK, but that would cripple a lot of their products’ capabilities and be obviously bad for the product owners (including entailing the loss of photos for most people). Would they have to shut down the App Store too? Would they even have to revoke all the existing app certificates, rendering people unable to use any already-installed app on their device?

#Apple

@zackwhittaker
Apple did not put in a backdoor like you insinuate.
They withdrew the feature from the UK. Something you are asking for.
But you ask for apple to leave the market.
Well only iCloud encryption left the market.
So on a smaller scale exaclty what you are asking for. 🤷‍♂️
@zackwhittaker
As far as Signal is much more respectful of it's users privacy (than Apple, I don't know why I precise that...), it still remains a centralised solution (can disappear or be transformed). To whom wants to leave proprietary solution, shouldn't us invite them to adopt decentralise solution (matrix or xmpp...)?

@zackwhittaker Capitulation would be complying with the order to add a backdoor that they cannot disclose. Exiting the market and denying users other private services is not in the user's interests either. I think what Apple did was reasonable.

Let's all chill down a bit.

@zackwhittaker

oh I guess it only matters if you refuse to unlock phones for the *US* government.

Or if you can turn not capitulating to the government into a publicity stunt that will make you more money, rather than having to stop selling iCloud subscriptions throughout the entire EU