{"id":20769,"date":"2022-12-09T10:30:03","date_gmt":"2022-12-09T18:30:03","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2022\/12\/09\/news-14502\/"},"modified":"2022-12-09T10:30:03","modified_gmt":"2022-12-09T18:30:03","slug":"news-14502","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2022\/12\/09\/news-14502\/","title":{"rendered":"Apple sets a security challenge for 2023"},"content":{"rendered":"

<\/p>\n

Given Apple’s big moves this week to roll out new data protection tools for iMessage and allow users to encrypt\u00a0more of their data in iCloud<\/a>, it seems obvious that security is going to be a major Apple priority in the year ahead.<\/p>\n

The Biden administration\u2019s decision to blacklist the mercenary hackers at NSO Group was a welcome move, but it hasn\u2019t stopped the “surveillance-as-a-service” industry.\u00a0Instead, it’s atomized it, which means we now have more companies offering such “services” than ever before<\/a>.<\/p>\n

The danger is that, just as with any other technology, the attacks used by these services are proliferating and mutating. And as more entities offer them, the cost of mounting state-level surveillance attacks of this kind will fall. This has always been predictable.<\/p>\n

Apple introduced three powerful new data protection tools this week: iMessage Contact Key Verification, Security Keys for Apple ID, and Advanced Data Protection for iCloud.\u00a0The aim is to protect users against such attacks.<\/p>\n

While most privacy advocates welcomed the move, some governments and the FBI are aghast, claiming that more tech-driven privacy will make their work harder.<\/p>\n

That may be true, but the cost of not<\/em> having these protections in place is likely so much greater \u2014 if governments could be trusted with surveillance tech of this type, then it would not be proliferating, right? And once that particular genie is outside the proverbial bottle, it\u2019s going to be very hard to decant it again. Already in the UK, the government claims 40% of businesses<\/a> were attacked last year.<\/p>\n

When it comes to business, the significance is clear.\u00a0What Apple is offering its own users should surely become the minimum expectation enterprises will make of their own cloud service providers.<\/p>\n

That means more security, enhanced security tools, and the highest possible degree of encryption around company data, inevitably including sensitive information like patient and financial data.<\/p>\n

We know enterprises need to take security seriously. A rising tide of ransomware and scary statistics show this:<\/p>\n

Apple has been heavily engaged in security enhancement this year<\/a>. Lockdown Mode<\/a>, Declarative Device Management<\/a> and numerous improvements in the APIs it offers to MDM providers to protect devices testify to this. In October, it launched a security portal<\/a> and increased bounties offered to security researchers identifying vulnerabilities.<\/p>\n

The company\u2019s work is being echoed by partners. Jamf, for example, has invested in advanced security telemetry solutions provider, ZecOps<\/a>, and is financing innovative security startups<\/a>.<\/p>\n

The work extends to partners. Competitors are working together across the industry to create a secure password-free security model<\/a> for the online world. Work to limit tracking technologies and to ensure user privacy also feeds into this.<\/p>\n

Looking ahead to 2023, I anticipate we will see this work intensify.<\/p>\n

Why?\u00a0Because in the current geopolitical environment, the scale of state-sponsored security attacks is accelerating, which means every platform provider, government, and enterprise will need to get as tightly locked down as possible.<\/p>\n

Apple has already flagged this direction of travel. \u201cWe have much more planned for the coming year, including an expanded research scope for Apple Security Bounty and other program enhancements,\u201d Apple said in October.<\/p>\n

Please follow me on\u00a0Mastodon<\/a>, or join me in the\u00a0AppleHolic\u2019s bar & grill<\/a>\u00a0and\u00a0<\/em>Apple<\/em> Discussions<\/em><\/a>\u00a0groups on MeWe.<\/em><\/p>\n

http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n

\n
\n

Given Apple’s big moves this week to roll out new data protection tools for iMessage and allow users to encrypt\u00a0more of their data in iCloud<\/a>, it seems obvious that security is going to be a major Apple priority in the year ahead.<\/p>\n

Stamping out surveillance<\/strong><\/h2>\n

The Biden administration\u2019s decision to blacklist the mercenary hackers at NSO Group was a welcome move, but it hasn\u2019t stopped the “surveillance-as-a-service” industry.\u00a0Instead, it’s atomized it, which means we now have more companies offering such “services” than ever before<\/a>.<\/p>\n

To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[2211,10480,10403,714],"class_list":["post-20769","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-apple","tag-ios","tag-macos","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/20769","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=20769"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/20769\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=20769"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=20769"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=20769"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}