As you all know, Apple is building spyware into iOS 15. This is ostensibly in service of fighting child pornography but will, you can be sure, be expanded to detect other illegal activities and finally wrong think™. Apple, of course, ensures us this won’t happen but, really, they won’t have any choice.
Governments have long been demanding a backdoor into Apple’s encryption, and the US even got a court order in 2016 demanding that Apple build one. Back then, Apple (successfully) argued that no such capability existed and that building one was a significant and costly undertaking with long term maintenance and support obligations. Now, of course, the machinery is already in place and it’s hard to see what arguments Apple could bring to bear against such a court order: certainly not that they’re committed to protecting their users’ privacy.
Apple aside, this brings up another, related issue: Can the government—any government—be trusted with such a backdoor? One needn’t descend into paranoid musings about rogue agents selling secret keys to malefactors. We can, instead, depend on Hanlon’s Razor. To wit: the government exposed its watchlist to an unprotected server on the internet. If this was the only example of such fecklessness we could shake our heads bemusedly and assure ourselves that those responsible would be put in charge of cleaning the bathrooms in the North Dakota FBI field office. But of course this sort of thing happens all the time and nothing at all will happen to those responsible for the disclosure.
What reason is there to suppose that these clowns would do any better in protecting a backdoor key? State and criminal actors would be working full time to get access and wouldn’t depend on someone leaving it exposed on an unprotected server. Sooner or later someone would be careless and the secret would be out. If the key were obtained by criminal elements, our smart phones would instantly become useless for banking or any other type of sensitive activities. If the FBI or any other government agency wants to hold a master key to our phones, they better have shown themselves capable of safeguarding that key. They better have shown themselves worthy of our trust. Sadly, they’ve shown just the opposite.