Source URL: https://it.slashdot.org/story/25/05/31/1859206/help-wanted-to-build-an-open-source-advanced-data-protection-for-everyone?utm_source=rss1.0mainlinkanon&utm_medium=feed
Source: Slashdot
Title: Help Wanted To Build an Open Source ‘Advanced Data Protection’ For Everyone
Feedly Summary:
AI Summary and Description: Yes
Summary: The text discusses the removal of Apple’s iCloud encryption feature in the U.K. due to government pressure, prompting a Google engineer to propose the development of an open-source alternative to enhance user data protection. The initiative aims to create a distributed system that safeguards against unauthorized access and surveillance.
Detailed Description: The article highlights significant developments in data protection and privacy, especially in the light of government actions impacting user security.
– **Apple’s Advanced Data Protection**: Apple initially offered strong encryption through its iCloud service but faced regulatory pressures in the U.K., leading to the removal of this feature.
– **Open-Source Initiative**: In response, a Google software engineer is proposing to build an open-source version of Apple’s Advanced Data Protection, emphasizing the need for immediate action to safeguard user data.
– **Distributed Trust System**:
– The proposed system would utilize a distributed trust model, where secrets (encryption keys) are split among multiple protection servers.
– To recover a secret, users would need a subset (T) of total servers (N), ensuring that no single server possesses the complete key, enhancing security against backdoors and mass surveillance.
– **Technical Feasibility**: The engineer expresses confidence in the implementation, claiming that relevant algorithms are available and can be deployed within a short timeframe, potentially leveraging community resources like Raspberry Pis.
– **Resistance to Surveillance**: This initiative aims to provide a high level of privacy protection against governmental requests and surveillances, which is crucial for users concerned about their digital footprint.
– **Call for Collaboration**: The engineer is not only sharing a vision but also inviting participation from others to develop the necessary server infrastructure and client applications for both Android and iOS.
– **Potential for Policy Development**: The text alludes to the need for intelligent policy discussions around encryption that balances user privacy with national security interests.
This initiative highlights important trends in cloud computing security, data encryption practices, and the implications of government regulations on personal privacy, making it significant for professionals in AI, privacy, and compliance fields.