Iceblock is not “completely unknown” | freedom

The Iceblock developer, the iOS app to report anonymous scenes of Immigration and Customs officials (Iceblock), is that it “guarantees the user’s privacy by storing any personal data.” But this claim has been scrutinized. Iceblock Joshua Aaron has been accused Providing false promises Regarding the lack of disclosure of his identity and privacy, Being “misleading” About the privacy provided by iOS, and Being an apple lover. The case is not what Iceblock stores are. It is related to what he can accidentally reveal by his narrow completion with iOS.

Aaron Iceblock issued in early April, and that It was spent to the top of the application store earlier this month after that And American Internal Security Minister Christie Nom described it as “an obstruction of justice.” When following calls to Android, the developer said it was not possible. “Our application is designed to provide the largest possible amount of unveiling its identity without storing any user data or creating accounts,” reads part of The lengthy message. “The achievement of this level of not disclosing his identity on Android is not possible due to the underlying requirements for payment notification services.”

The statement arranged some. Graphinos developers, open sources focusing on Android privacy, deals, Bluezki To accuse iceblock of “spreading wrong information about Android” by describing it as less privacy than iOS. The developers said that Iceblock ignores the data that Apple itself and claims to “provide anonymity when you don’t do it.”

Harun said freedom Iceblock was built around one database in iCloud. When a user on the map to report ice scenes, the site data is added to this database, and users are sent within five miles automatically to notify payment by alerting them. Pay notifications for developers require that they have a way to set the devices they receive, and while Aaron refused to say exactly how the notifications work, he said that the alerts are sent through the Apple system, not iceblock, allowing him to avoid maintaining his user database or their devices. “We used ICloud in a creative way,” said Aaron.

There is no 100 percent safe security model, but in theory, Iceblock can reduce the risk of people who report and receive information. The Ministry of Internal Security can request information about who has provided advice, but according to Aaron’s interpretation, the application will not have accounts of users, device identifiers or IP addresses to deliver them. Likewise, if ICE believes that someone has used the application to find a process and intervention, he can search for records of Iceblock associated with those who received a specific payment to pay-again, the empty-handed should come out.

This trick is only iOS, though. ICBLock iOS can consist of Apple’s iCloud infrastructure to direct the payment notifications because each iPhone user is guaranteed to get an iCloud account. Aaron said: “Android users do not need to create Google accounts,” so “a type of database must be created in order to obtain user information.”

I spoke to Gaël Duval, founder /CEO of /E /OS, another version focused on Android privacy, and admitted that Android’s payment notifications require “registration code that uniquely determines a specific application on a specific device” and that this “is supposed to be usually saved on the iCBLock server”.

“It is a long and random series,” he said, does not include either the Android or IMEI identifier that determines a specific phone. “Google can still set it back to the devices on its side, but for iceblock, it is a pseudonym until it connects it to anything else.” So, in fact, Android iceblock notifications require to store potential information. Usually, iOS will, too, but the smart alternative solution allows iceblock to avoid it completely.

But you may have monitored the problem: Iceblock does not collect device data on iOS, but only because similar data is stored using Apple instead.

Apple maintains a database made by devices and accounts to install a specific application, and Carlos Anso told me from Grapheneos that it is also possible to track the device records for payment notifications. For iOS for iCEBLOCK or default Android app, the law application can request direct information from the company, cutting iCeblock outside the episode. Aaron told me that he “has no idea what Apple will store”, which is “unrelated to iceblock”.

For people who make reports, Duval suggested that there may also be a “remaining danger” of the timing of matching reports and remote measurement data, ANSO chanted a similar concern. But without the exact details of the iCeblock design – in which Aaron is concept concept in sharing – it is impossible to verify. “Certainly not,” Aaron said when I asked whether this was a concern. He insisted that “there is no danger” from Apple that contains data made by users reports.

Aaron said that Iceblock is mainly no data on its users on iOS at the present time and that it has not been able to achieve the same setting on Android, web application or open source design. Critics argue that it provides a false sense of safety by emptying the risk on Apple. Although it is not exactly clear data that Apple has on iCeblock users, it is sufficient for us to suspect the claim that “there is no data.”

The question, then, is the extent of safety Which – which Data with Apple. Aaron insisted that “nothing would harm Apple the user,” and was confident that Apple will not share it anyway. He said: “Apple has a history that when the government tries to come to things, they did not reveal that information, they went to the court.” “They fought those battles and won.”

This is not quite true. While Apple participated in some battles for prominent privacy with governments and law enforcement-including efforts Log in to San Bernardino Shooter’s iPhone or The latest rejection of building the rear door in ICLOUD encryption in the United Kingdom – He corresponds to most of the government’s requests. In the latest transparency report, for The first half of 2024Apple said it had agreed to 86 percent of US government’s requests to access data -based data, 90 percent to arise -based arrival, and 28 percent for payment notification records. Many of this benign – and it includes helping to track lost or stolen phones, for example – but others are associated with cases that “Apple account may be used illegally.” Payment notification data requires both Apple and Google It becomes a major way For law enforcement to identify suspected criminals.

People are a constitutional right To record public police operations and exchange advice about the viewer. As Aaron, an application like iceblock -, said, unlike Nayyem’s allegations – “illegal in any way” under the current American law. But during the period, neither the president nor the Supreme Court He considered many constitutional rightsThe question is not whether Iceblock is legally, whether any information you are going through may expose people who resist ice, legally or not.

“We don’t want anything,” said Aaron. “I don’t want a special database. I don’t want any kind of information on my side at all.”

There is rubbing. Iceblock says your data is safe because it does not contain anything, but this does not mean that it does not exist. Do you have a lot of faith in Apple as Aaron does?