Jeff JohnsonWait, what? macOS Tahoe beta 2 automatically enabled FileVault and uploaded a recovery key to iCloud.
I did not have a choice in the matter.
This is fucking insane!
kajer@lapcatsoftware Is this OneDrive?!
RootWyrm 🇺🇦
@lapcatsoftware much, much worse than insane. Apple has made it quite clear they are happy to do the bidding of fascists and authoritarian regimes.
Particularly while doing PR to claim that Apple is 'more secure' and the government would 'never' ask them to do so.
Basically, people are fucking stupid if they think Apple isn't eager to decrypt and volunteer all of your most private data to literal Nazis before they even ask.
Jesus@lapcatsoftware Defiantly need consent for these things although I get why they do this by default for regular users. however it’s saved in your password manager which any data is e2e. Wouldn’t you still need your device passcode on your iPhone to view the recovery key? I haven’t read the documentation for the new macOS yet
Nick Zolotko 
@lapcatsoftware I submitted FB18310782 about this. :(
https://openradar.appspot.com/radar?id=EhAKBVJhZGFyEICAgIb1_PkJ
Buccia@zolotkey @lapcatsoftware They should definitely not force FileVault nor key escrow, but you should be able to reboot and login remotely using this trick: https://superuser.com/a/1024694
troz@lapcatsoftware Beta 1 did this too. I turned it off immediately.
@troz Ah, interesting! Did you upgrade install? I clean installed Tahoe and didn’t sign in to iCloud.
@lapcatsoftware I did an upgrade install of beta 1 which turned on FileVault. Updating the beta 2 did not turn it back on again, so it appears to be the first upgrade that does this.
@lapcatsoftware This is not the same as the current “Allow my iCloud to reset FileVault”, is it?
Adam Shostack 
@lapcatsoftware Do you have Passwords syncing to icloud?
⚯ Michel de Cryptadamus ⚯@lapcatsoftware wait til you find out about what macos does to your disabled wifi when you're asleep
maikm@lapcatsoftware I installed a fresh Tahoe into a VM directly from Beta 2, and it didn't even enable FileVault by default. After turning it on (and not being signed into iCloud), it looks like this:
@maikm A fresh install won’t do it. I believe you have to be already signed into iCloud when upgrading.
Mikołaj Hołysz@lapcatsoftware If you had no file vault and now you have it, your security has been improved, there's no way around it.
Before, anybody could access your computer, including the Apple and any government agencies. Now, Apple and those government agencies still can access your computer, so can you, but unaffiliated malicious attackers cannot.