Slashdot Mirror
Apple Fails To Remove 'Deleted' Safari Web Browser Histories From iCloud (betanews.com)
Reader BrianFagioli writes: Apple was storing Safari browsing histories in iCloud, even after they had been 'deleted' by the user, with such records being kept going back to 2015 -- although apparently this was an accidental by-product of the way the cloud syncing system works rather than anything malicious, and the issue has now been fixed. This information first came to light in a Forbes report, which cited Vladimir Katalov, the chief executive of Elcomsoft, a Russian security firm (which focuses on password/system recovery). Katalov stumbled onto the issue when reviewing the browsing history on his iPhone, when he discovered his supposedly deleted surfing history still present in iCloud, being able to extract it by using his company's Phone Breaker tool.
As reported by MacRumors The deleted browser history was listed in a record called literally named "tombstone" that was separate from other iCloud functions.
That doesn't like an accidental defect in design in any sense.
"Accidentally", yeah... I've got a bridge to sell, cheap, then.
As details of this case are not yet know, let's take a look at Google's 8.8.8.8. It is widely advertised as anycasted, and indeed, it is. However, have you noticed that, no matter where you are, all those anycast targets are located in a single country, despite the very purpose of anycast being geographic proximity? You can't suspect Google of technical incompetence, what could the real reason be, then?
Let's see... we have 2nd most nosy company, all targets are in the 1st most nosy country, both of which have extensive machinery to cross-match this kind of data. But, Google is perfectly capable of serving DNS from any of their datacenters, and only then coalescing the logs, so they have no incentive to degrade user satisfaction they'd be able to trivially fix. Thus, it's clear who's evil here.
So, is your resolver set to 8.8.8.8 or 8.8.4.4? Do you enjoy the metadata on every single TCP/IP connection you make that's not using a numeric literal being logged by someone who received a nice fat NSL?
I guess that Apple, with all their evilness elsewhere, is not the party to blame here.
The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
Oh it's definitely intentional in some respect. It's probably based in a fear of accidental mass data corruption/deletion, that they can still successfully recover from. Or maybe an abandoned attempt at versioning that they thought they might want someday.
> It's probably based in a fear of accidental mass data corruption/deletion
Wait, so the one part of your ios device- which may store documents you need professionally, financially relevant documents, or even irreplaceable personal stuff- that gets this special "deleted just means moved to a special hidden place" treatment is YOUR BROWSER HISTORY?
Lets be real here, there's no way that's possible. And this is a backup copy of USER DELETED items, mind you.
Data stored on the IOS device isn't synced between devices. Is browser history?
The "backup" in question is on the device, not iCloud (which follows a sane retention policy, I think FTA). It's just being controlled by iCloud.
I'm not saying they were giving it a special status - just that they abandoned something they started and never cleaned up after themselves.
iCloud most likely uses Cassandra in at least some parts, and tombstones are simply how distributed deletes are in done by this DB and a lot of other NoSQL databases.
Educate thysefl: http://thelastpickle.com/blog/2016/07/27/about-deletes-and-tombstones.html
And I speculate that iCloud is likely using Cassandra because Apple has contributed significant patches to it. Cassandra's website says that Apply has over 75,000 nodes.
This is what happens when you combine a syncing service with a backup service into a cloud product.
FTFY
The cesspool just got a check and balance.
When you upgrade your Firefox web browser, the old cache directories still remain there in .mozilla/firefox/*.defaulted.
Law enforcement have always been pushing for Internet usage and browser histories to be archived. Remember the fuss over various Windows media players sending back lists of movies watched.
Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
Yes, browser history is synced between everything - Macs and iOS devices all share the browser history. So if you visit the site on your Mac, you can revisit it on the road on your iPhone or iPad by browsing your Mac's browser history.
Of course, this then raises the question of what does it show if you haven't touched the browser on your Mac in a little while? Say you last used it a month ago, and you've been referencing the month old browser history. Should it disappear all of a sudden - today you try to visit your Mac's browsing history and it's all gone? (Granted, you should look at your device's browser history for that, but habits can be hard to break).
It should be noted that only Elcomsoft's tools could access it - the tombstones were not available to devices as they never attempted to access it.
Keeping some deleted data would be useful for syncing, since it could resolve whether it was "deleted" rather than just missing on the device that doesn't have it. I assume that's what the 2-week retention of deleted stuff was for in the first place.
This whole thing just sounds like a bug where the items retained as essentially just syncing metadata never got properly deleted.
Deflect from discussion! Blame competitor A!
I don't like Apple, I consider them the Monsanto of software world, far worse than Oracle or Microsoft, but even if you hate someone, you shouldn't expect them to be always in the wrong.
Except Lennart. He has no redeeming qualities.
The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.