full-disclosure - Re: iCloud and privacy...last word

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Fri, 29 Nov 2013 00:54:49 -0500
From: Jeffrey Walton <noloader@...il.com>
To: silence_is_best@...hmail.com
Cc: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: iCloud and privacy...last word

And don't forget Apple's own lawyers tell us it can't be trusted:

A layman’s analysis of License Agreements and Terms and Conditions
reveals how little security is afforded to your documents in cloud
storage and backup to the cloud. For those who don’t read them, one
popular platform has 142 separate documents covering Terms of
Conditions for its cloud alone.[1] The documents discuss your rights
if the company (1) gives away your data, (2) shares you data with
partners, (3) looses your data, (4) provides your data to authorities
(sometimes without an order or warrant), (5) does not provide
reasonable skill or care, (6) commits willful misconduct or fraud, and
(7) acts with negligence or gross negligence. “Your rights” is
misleading since it is consent, and the document effectively states
you indemnify the company: “You agree to defend, indemnify and hold
Apple, its affiliates, subsidiaries, directors, officers, employees,
agents, partners, contractors, and licensors harmless from any claim
or demand, including reasonable attorneys’ fees, made by a third
party.”[2]

[1] iCloud Terms and Conditions,
https://www.apple.com/legal/internet-services/icloud/ww/

[2] iCLOUD TERMS AND CONDITIONS,
https://www.apple.com/legal/internet-services/icloud/en/terms.html

On Thu, Nov 28, 2013 at 8:21 AM,  <silence_is_best@...hmail.com> wrote:
> Apple Discussions has a large portion of people dead set on making sure
> everyone knows that iCloud data is different then your "other" data.  I
> disagree...follow you're data:
>
> http://www.apple.com/privacy
> "Here are some examples of the types of personal information Apple may
> collect and how we may use it."
>
> What:
> "we may collect a variety of information, including your name, mailing
> address, phone number, email address, contact preferences, and credit card
> information."
> "When you share your content with family and friends using Apple products,
> send gift certificates and products, or invite others to join you on Apple
> forums, Apple may collect the information you provide about those people
> such as name, mailing address, email address, and phone number."
>
> So....my info and any info about friends...gotcha.
>
> How they use/share:
> "It also helps us to improve our services, content, and advertising."
> "You may be asked to provide your personal information anytime you are in
> contact with Apple or an Apple affiliated company. Apple and its affiliates
> may share this personal information with each other and use it consistent
> with this Privacy Policy. They may also combine it with other information to
> provide and improve our products, services, content, and advertising."
>
> iCloud:
> http://support.apple.com/kb/HT4865
>
> the Pièce de résistance:
> "This article explains how iCloud keeps your personal information and data
> secure. In addition to this article, you should also review Apple’s Privacy
> Policy, which covers iCloud."
>
> Yea last word on this....use iCloud, share your stuff with Apple and their
> affiliates...and done!
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/