Post by @Em0nM4stodon@infosec.exchange

@Em0nM4stodon@infosec.exchange 4 hr. ago

Imagine you're having a remote appointment with your doctor for a very personal health issue.

Your doctor is a tech enthusiast, and is proudly wearing the new Apple Watch with all the recording features enabled.

You don't see the "Audible and visible signals for Live Rewind", because you don't see your doctor's wrist on videochat or on speakerphone.

The "Omitted content" safeguard fails to detect the sensitive conversation, because none of the pre-selected keywords are detected.

"What about all the privacy laws protecting me?", you claim in distress.

Sadly, your doctor is unaware and thinks "surely Apple respects all the laws by default?"

The medical clinic isn't informed about privacy risks related to new technologies, and hasn't implemented any training or policies about it yet.

Your sensitive health data is collected by Apple's new features, stored on their servers, blissfully unaware of the infringements to your consent, your privacy, and all the laws supposed to protect you.

This is only one scenario of the many surveillance nightmares we might hear about in the coming months and years.

Brace yourself.

#Privacy #Security #Consent #Apple

#consent #apple #security #privacy

4 Boosts

0 Likes

Lesley

@lesleyr@aus.social 35 min. ago

@Em0nM4stodon I think this is bigger and scary things are already happening. E.g. let's reframe the story lightly:

Imagine you're having a remote appointment with your doctor for a very personal health issue ...

The watch records the entire appointment, and after syncing via Apple servers, is transcribed using a small ML model on their iPhone making errors about your personal details. Your doctor acts on these errors and you face the consequences. There are no safeguards.

This could have been many years ago, using voice memos, syncing using iCloud. Or any other Apple device.

The unfortunate reality is that regulation desparately needs to keep up even without any of this new Apple stuff :(

E.g. in my country: most doctors now depend on *free* AI transcription sites that collect user data to sell as training data. They are meant to ask for consent. Some ask, and only fewer will listen when you say "no" since they have become dependent on this.

As far as I can tell, in a lot of the world, rights to privacy have fallen woefully behind the rights implicitly granted to corporations and individuals to spy on others 😞.

Also: terrible to learn that the "Siri Recap" thing can work on the Apple watch.............

Joan, but festive 🎅🏼🎄

@clickhere@mastodon.ie 1 hr. ago

@Em0nM4stodon Hi Em, thank you so much for this. Could I ask for your permission to use this post in data protection training delivered to colleagues (Ireland)?

Em :official_verified:

@Em0nM4stodon@infosec.exchange 1 hr. ago

@clickhere Yes, absolutely! And thank you for asking. I'm very happy if this can help others with data protection training 💚

John Gruber

@gruber@mastodon.social 1 hr. ago

@Em0nM4stodon When do you believe any of this is "stored on their servers”?

Em :official_verified:

@Em0nM4stodon@infosec.exchange 1 hr. ago

@gruber From Apple's documentation:

"For Siri Recap, Apple Foundation Models running on Private Cloud Compute (PCC) summarize and format the final output."

"Siri Recap summaries and saved Live Rewind text snippets stored in the Siri app are end-to-end encrypted when synced through iCloud"

"If you use iCloud with two-factor authentication and have a device passcode, any Siri Recap summary or Live Rewind text snippet you choose to save syncs across your devices end-to-end encrypted in the Siri app."

Source: https://support.apple.com/en-us/148354

View

Tanek Rune

@Cassandra_Complex@beige.party 2 hr. ago

@Em0nM4stodon
Similarly, imagine when your physician's smart watch records that you're pregnant and that's used to charge you for abortion. Or you start getting baby item ads and your partner gets angry and there's a domestic dispute because of it. There's so many ways being constantly recorded will not work out in the favor of anyone, but especially women.

NewsHund

@NewsHund@mastodon.social 3 hr. ago

@Em0nM4stodon they told us a long time ago that privacy is an illusion … and then they worked to make it true.

WEEEeee

@glitterbean@wehavecookies.social 4 hr. ago

@Em0nM4stodon Don't give them ideas. 🤔 😂

Em :official_verified:

@Em0nM4stodon@infosec.exchange 3 hr. ago

@glitterbean If even only one tech-enthusiast doctor reads this, then thinks "Oh gosh, I haven't thought of that before. I will make sure to keep my smart watch at home and never wear it at work! I care about my patients!", then my mission will be accomplished.