Vitalik Buterin, co-founder of Ethereum and one of the most vocal voices for decentralization, has joined the argument against the UK government’s request that Apple grant it backdoor access to users’ data.
Apple recently disabled its data security tools for customers in the UK after the United Kingdom government demanded that the iPhone maker turn over user data to British authorities. This move means that Apple and the government can now access the previously private data of Apple’s UK users.
In its defense, Apple claims that more sensitive information like communications over text and phone calls will remain end-to-end encrypted.
Predictably, iPhone users in the UK are unhappy about this situation. Tom Harwood, British journalist, political commentator, and television show host, took to the X (formerly Twitter) social media platform to express his displeasure with the situation stating, “No UK customer data stored on iCloud will be encrypted, making it all accessible by Apple, the Government, and – frankly – the most horrific hackers you can possibly imagine. Imagine the blackmail, extortion, and identity theft the government is bringing on its own citizens.”
Apple’s compliance with the UK government’s demands
Apple introduced the Advanced Data Protection (ADP) feature in late 2022 to provide end-to-end encryption for iCloud backups. That way, only users can access their own iCloud data using their passwords.
However, the UK government, while citing the Investigatory Powers Act of 2016, filed a secret order for Apple to remove the ADP feature for UK customers. Without the ADP’s encryption, the UK government can have Apple provide access to encrypted users’ iCloud data upon request.
There have been other moments when Apple’s security measures have caused tension with law enforcement and governments. In 2016, Apple was in a standoff with law enforcement after it refused to unlock the San Bernardino shooter’s iPhone.
Choosing to remove the ADP feature for UK customers entirely means that Apple has acquiesced to compromise its encryption standards. This decision also means that UK users’ iCloud data is no longer protected by end-to-end encryption. Apple can now access the data its UK uses store on their iClouds, by extension, the government under lawful requests, and by extension, bad actors with the equipment or clearance.
While Apple has said it is disappointed over this outcome, it maintains that certain data categories, such as iCloud Keychain passwords, health app data, and communications on iMessage and FaceTime, will continue to be end-to-end encrypted.
Vitalik Buterin weighs in
In response to the UK’s demands and Apple’s subsequent compliance, Buterin shared his disapproval on his X account.
Vitalik urged security agencies like the United States National Security Agency (NSA) and the United Kingdom’s Government Communications Headquarters (GCHQ) to work towards enhancing citizens’ digital security.
“Glad to see this backdoor push getting a much-deserved smackdown,” Vitalik tweeted in response to a tweet by Rt. Hon Ben Wallace, former UK Secretary of State for Defense.
Vitalik pointed out the inherent dangers of centralized data collection points such as government or corporate databases, noting that they are susceptible to access by various adversaries. Buterin recalled the Louisiana drivers’ license cyber attack to support his argument.
