Cybersecurity

10576 readers

55 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 3 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

You can't opt out of Apple's own keylogger (appleinsider.com)

submitted 2 days ago by verifytheposter@leminal.space to c/cybersecurity@sh.itjust.works

6 comments fedilink hide all child comments

every App Store search is logged letter-by-letter, with millisecond timestamps. Apple can compute your typing speed.

every search you type, timed to the millisecond, stored to your account

https://appleinsider.com/articles/26/06/17/apples-app-store-search-data-stores-every-single-keystroke

you are viewing a single comment's thread
view the rest of the comments

[–] glowie@infosec.pub 7 points 2 days ago (3 children)

I wouldn’t be surprised if this feature could be or isn’t already extendable to the whole OS for the Feds

[–] FineCoatMummy@sh.itjust.works 2 points 1 day ago

IDK... I'm not defending the bad shit Apple does. But they pushed back against both US and UK govs who were trying to backdoor their shit.

In the UK case, they pulled the entire feature rather than backdoor it for the Home Office. With warning for users, so ppl are not expecting to have encryption, w/o knowing it is backdoored.

In the US case, the US gov tried to compel Apple to create special versions of IOS with encr backdoors. The gov later found a 3rd party who was able to unlock the iPhone, and withdrew the demand. But a judge ruled that Apple could not be compelled to build a special backdoor version.

I don't like Apple. I don't use 'em. They have privacy probs for sure. But they also have pushed back lots of times vs gov attempts to force backdoors into iOS.

[–] floquant@lemmy.dbzer0.com 5 points 2 days ago

I think the first time I read about Instagram profiling typing speed/style to infer depressed users was close to a decade ago

[–] verifytheposter@leminal.space 1 points 2 days ago

Is there solid proof that it is used globally? Have technology experts conducted any research on it, or is verification simply impossible because they cannot inspect the code?