iCloud Uploads Local Data Outside of iCloud Drive

https://datavibe.net/~sneak/20141023/wtf-icloud/

by sneak • 12 years ago

199 114 12 years ago

datavibe.net

rdl• 12 years ago

Uh, wtf.

I guess if you don't opt in to iCloud Drive you're safe?

ge0rg• 12 years ago

The link is 404 now, anyone got a mirror?

maxden• 12 years ago

Basically he says that files that were open but not explicitly saved by the user, were temporarily saved locally in ~/Library/Saved Application State/ but since updating to Yosemite, these are now all saved/uploaded to iCloud. So all his temporary notes he open in TextEdit have been uploaded.

hnarn2• 12 years ago

Works fine for me. Here's a PNG of the page: http://i.imgur.com/cjuWYuc.png

Freaky• 12 years ago

IPv6 by any chance? Try http, that seems to be working better for some reason.

whizzkid2• 12 years ago

Like Adobe streaming their Photoshop software from their servers, Like Google is trying to push Chrome OS so that you DO NOT need hard drives.

Big boys in market, sooner or later, will move all software and hardware power to their side leaving you with a screen, mouse and keyboard to interact with everything.

As soon as companies do not have control over whatever you are doing, they are losing benefit on it.

Get ready to this big move already, every big company will try to do this to my opinion which is sad.

hnarn2• 12 years ago

As long as there are computer parts and open source software, you can still opt out if you want to.

justcommenting• 12 years ago

don't forget the importance of open hardware, e.g. bunnie's novena project

mahouse• 12 years ago

While I agree that I definitely see this trend, this does not mean that this trend will end up winning. We have seen lots of horrible trends like this one and almost none of them survived.

parasubvert5• 12 years ago

I think you underestimate the momentum behind this trend: the vast manjority of users want it.

132• 12 years ago

It's at odds with the name, but Creative Cloud runs independent of Adobe. "Cloud" refers to a harsher anti piracy check under the guise of a Dropbox like file storage that nobody uses.

firloop• 12 years ago

I think the parent level poster was referring to the cloud-streaming capabilities Adobe is rolling out for Photoshop and presumably other programs, starting on the Chromebook.

http://chrome.blogspot.com/2014/09/adobe-joins-chromebook-pa...

cjensen• 12 years ago

Guy is confused. New documents which are not explicitly saved to the local filesystem were already stored to iCloud on Mavericks.

sehugg• 12 years ago

http://support.apple.com/kb/TS4372

sneak13• 12 years ago

Good find. The fact that this is a KB article seems to confirm what a huge violation of customer trust this is - they know this violates the principle of least surprise.

X-Istence2• 12 years ago

Except that this does not violate the principle of least surprise at all.

I expect that files I edit are saved at some point, somewhere, iCloud makes perfect sense in that it allows me to pick up where I left off on any device. Not only that, but Mavericks had the same behaviour for unsaved files as far as I remember.

threeseed2• 12 years ago

There are KB articles for everything. You are reading too much into it.

brohoolio2• 12 years ago

whoa. i'm going to have to flag our security folks about this.

scottmf• 12 years ago

TextEdit used to auto save things to iCloud on Mavericks for me. No one made a big deal out of that.

joelberman• 12 years ago

For continuity to work, it should be obvious that what you are working on must be stored somewhere other than the machine you have turned off. The obvious place is on iCloud. Just do not enable continuity if you do not want to enjoy is features.

josho• 12 years ago

Since the continuity feature requires Bluetooth 4, I figured the magic was done over Bluetooth and wifi.

I personally don't mind using iCloud, but I understand the authors reservations. But feel the root problem is the NSA, not apple. It's too bad that America has lost control of its government and is unable to fix this.

parasubvert5• 12 years ago

The sadder truth is that the root problem is Not the NSA, it's the majority of Americans who don't understand the implications of their passivity. America by and large wants the NSA to spy on them. Given the number of protests swarming Washington about almost every issue under the sun, there have been a dearth about the NSA. America doesn't understand the problem and thus doesn't want to fix it.

threeseed2• 12 years ago

Most countries have surveillance on their citizens. And most citizens 100% support it.

sneak13• 12 years ago

There is no text editor on iOS, so documents stored in TextEdit are not expected to be subject to Continuity. Additionally, I do not use iA Writer on iOS (nor do I know if there is even an iOS version), so it is reasonable to expect that unsaved drafts I have open in that program would not leave my computer.

RotsiserMho• 12 years ago

I believe the intent is to sync state between Macs, e.g. a MacBook and an iMac.

kps• 12 years ago

Last I looked, iCloud was not HIPAA¹-compliant. Health-care workers who previously could have iCloud enabled, as long as they did not use it for HIPAA-covered documents, may be in for a big and expensive surprise.

¹ http://www.hhs.gov/ocr/privacy/hipaa/understanding/

X-Istence2• 12 years ago

Mavericks had the same behaviour as Yosemite iirc, except it was less obvious.

MikeyJck• 12 years ago

in Mavericks default save location was iCloud for docs but it didn't silently upload stuff afaik

brohoolio2• 12 years ago

Very expensive. I'm flagging our security.

epistasis3• 12 years ago

Clouds are almost universally antithetical to HIPAA, it's extremely rare to find a SaaS provider that will sign a HIPAA BAA.

And anyone working with data under HIPAA had better know this already!

patio114• 12 years ago

Right, which is why I don't have any HIPAA-covered data in Dropbox, but my risk assessment does not include "I have Dropbox installed on my machine, ergo, I need to be careful to never access HIPAA-covered info from my machine", which is apparently the level of care I now need for Yosemite. (An upgrade which just got delayed indefinitely, for the obvious reason.)

frostmatthew• 12 years ago

VMware's vCloud Air does: "To help customers comply with HIPAA and HITECH, VMware offers a Business Associate Agreement (BAA) to all interested customers using our US-based data centers."[1]

[Full disclosure: I work on vCloud Air]

[1] http://vcloud.vmware.com/service-offering/security-complianc...

api3• 12 years ago

Cloud is almost universally antithetical to any form of privacy, content security, or exfiltration protection.

dragonwriter• 12 years ago

Clouds are almost universally antithetical to HIPAA, it's extremely rare to find a SaaS provider that will sign a HIPAA BAA.

That's true of small services, but less so of big enterprise vendor (and, given the size of the health IT market and the big enterprises to serve in that space, that shouldn't be surprising.)

patio114• 12 years ago

Although non-compliant activity with regards to e.g. spreadsheets containing patient data is extraordinarily widespread [+], you're correct, putting a spreadsheet with PHI on iCloud (whether you intended to or not) is a reportable breach.

(Not a lawyer, but I have to care about this, for professional reasons.)

[+] Say, emailing in the clear about PHI. This is extraordinarily common even among people who theoretically know better.

toomuchtodo• 12 years ago

Are organizations that are caught emailing PHI in the clear not punished for this? Or are the damages insufficient to change the behavior?

caycep• 12 years ago

From what I can tell, I think a lot of people in healthcare view HIPAA as poorly written, and more or less a bureaucratic obstacle to doing their jobs effectively. Part of it also is that all the EMR solutions are so terrible that to try and do patient care entirely within a given EMR is so painful, people do the dropbox/email route to get around their limitations.

xenadu02• 12 years ago

Apple is not a "PRISM" partner; I thought we all agreed that this was when the NSA discovered goto fail and/or some jailbreak exploits.

sneak13• 12 years ago

The Washington Post documents claim otherwise:

http://www.washingtonpost.com/wp-srv/special/politics/prism-...

Anechoic2• 12 years ago

That link doesn't contradict xenadu02's claim. Do you have a link that better spells out that Apple is a willing partner in PRISM?

hbbio• 12 years ago

Apple joined PRISM a few months after Steve Jobs death.

flatdeviant4• 12 years ago

Nope. PRISM has do to with "direct access" to Apple's servers. This is according to NSA's own documents, and Apple may either be aware and forced by law to lie (Yahoo-style [0]) or unaware of this (i.e. they got hacked by NSA). Nothing to do with SSL being broken, especially as iCloud didn't run on Apple software but on Azure and AWS back then[1], and therefore iCloud wasn't itself vulnerable to goto fail.

[0] https://finance.yahoo.com/news/how-the-government-could-have...

[1]: see iOS security white paper from Feb 2014, iCloud was the same back in 2012.

snowwrestler• 12 years ago

"Direct access" came from a Washington Post story and it has since been walked back. PRISM is a program operated by the FBI, through which they make FISA court requests of data companies (like Apple) and then share the results with the NSA.

quesera9• 12 years ago

Interesting, but:

There are two kinds of users in this scenario. Those who don't care (99%) and those who do.

If you count yourself among the latter group, as I do, then it's always solid advice to choose actions which clarify your intentions.

In this case:

  - don't use iCloud
  - don't use iCloud sync for the app you use for private data
  - do explicitly choose to save the file locally
  - don't enable new features like Continuity that clearly change the file
    persistence and availability model without considering your old patterns

The author is rightly sore that his bits got pushed to Apple due to his oversight. He's wrong to place the blame fully on Apple, but it's hard to be fair when you're angry. And I'm glad he wrote it up because it should encourage people to think carefully about where and to whom they trust their data. Though most people I know sync their private data to Dropbox, Ffs, so...thinking != thinking, I guess.

My secure notes strategy is vim with encrypted files on an encrypted partition. It could still leak, and I'd be angry, but there are at least three vendors involved that would have to alter their products behaviours before I was hugely surprised. TextEdit on HFS+ on OSX with iCloud enabled is just one vendor, who can't always cater to my 1% of 1% expectations.

sneak13• 12 years ago

I'm not angry, but it does violate the principle of least surprise and the document model that's been in use for text editors forever.

I opted in to iCloud Drive to synchronize files - files I chose to store in iCloud.

I did not opt in to synchronize my unsaved files in apps not currently supported by Continuity, nor was there any warning or indication that that would occur.

How would you feel if the OS, without warning, started syncing your vim temporary files (including your pre-encrypted versions) to the cloud? This is the same thing. Don't hate because it's TextEdit and iA Writer.

quesera9• 12 years ago

Right, well I agree with you almost entirely.

My only hesitation is that you and I have to recognize that we are on the fringes of the fringe, and be hyper-vigilant.

This behaviour is only surprising if you get lax (as I was, too) about evolving functionality.

My point about vim is that for me, it's a purposeful simplification. I do sometimes wish for a more flexible note taking app, but I know that it would take an earthquake of change for vim to sprout a file sync feature that tied into iCloud. And I value that, a lot.

shurcooL• 12 years ago

my unsaved files

How would you feel if your unsaved files suddenly disappear? Would you blame apple for deleting files you explicitly chose to not save?

You were relying on a feature in an unusual and unintended way. Sooner or later, that may stop working.

The "unsaved files" being not synced to iCloud was never something that was meant to be guaranteed, it was just how it was.

What I'm suggesting is that by opting to explicitly save a file locally, you're giving more of a signal that you don't want it available remotely, compared to not saving a file at all.

sauere• 12 years ago

To be more precise: don't use OSX. You have no control on what is happening, syncing, uploading, shadow-copying etc. in the background.

amirmc4• 12 years ago

"There are two kinds of users in this scenario. Those who don't care (99%) and those who do." ... "The author is rightly sore that his bits got pushed to Apple due to his oversight" (emphasis mine)

This attitude is completely unhelpful. It throws those who are otherwise ignorant under the bus simply because they don't (can't?) understand how modern tech works. Is that really fair? Must we really divide the world up this way? Most of the public hasn't caught up to how modern systems work and what the trade-offs really are, and they certainly won't if this is the approach we choose to take.

It's almost reminiscent of Morlocks and Eloi from HG Well's Time Machine.

nobbyclark2• 12 years ago

Sadly this type of response seems to be common amongst those that do get it. "Whatever. Most people don't care anyway."

If you look at the reaction of those 99% to Apple planting a U2 album on their phone, you see an angry response when people are made aware...

quesera9• 12 years ago

Well, it's like this.

When I know that I value a product or service for different reasons than the majority of other customers, I recognize that the product might change in a way that eliminates or reverses the value I derive.

When I think about the privacy of my personal information, I know that I would be greatly irritated to learn that a single shred of "my stuff" went anywhere outside of my control.

I care. I care a lot. The cloud is not made for me. Social technology is not made for me. The extent that social and cloud creeps into my operating system of choice is a clearly tense relationship that I have to think about and plan defensively around.

I don't think everyone should have to do that -- but they don't. They want universal sync and autotweeting, and I am not one to begrudge them.

When I say "most people don't care", I mean that they have decided that the benefits are greater than the risks, and on the whole would rather trust Apple than Google or some syncerrific.io sort of operation. Maybe they care that their friends, neighbors, and coworkers can't read MyFavoriteHentai.docx, but they do not care much about strangers.

So they get the product that they want. And I (and some of the rest of us, but really quite few) do not. And this is the way it should be.

So I'm not throwing anyone under the bus. I wish there was a way to make the product that people want without making it harder for me (and the OP) to get what I want out of it, but it's impossible to serve all cases. That becomes my problem, and I bear it willingly.

untog• 12 years ago

There are two kinds of users in this scenario. Those who don't care (99%) and those who do.

Correct, and those of us that do should act on behalf of those who don't, because a good many of them are not technically inclined enough to know if they should care.

quesera9• 12 years ago

Totally agree. Which is why I mentioned that I'm glad the OP posted about it and brought it to our attention.

Apple is averse to asking users lots of questions in general, but especially difficult questions that most won't understand or know how to answer -- or the implications of their choice. Pretending for a sec that Apple will change their default setting here, to the detriment of 99% of their users but to satisfy the noisy us... I'd love to see suggestions on how to word this checkbox option.

iCloud has a lot of options already. It's a complicated concept for most people. I agree that this is borderline surprising behaviour, but I don't see how to avoid surprising someone.

mempko• 12 years ago

Actually there are 4 kinds of users.

- Those who don't care and will never care

- Those who don't care but will care in the future

- Those who care now and will care in the future

- Those who care now and will not care in the future.

The first one is common. The second one does happen. The third one is more common than the fourth.

I think the amount of users this will affect is greater than you expect.

Istof• 12 years ago

don't enable new features

most of the time, the default is to enable the new privacy invasive features unfortunately... (it should be opt-in, always)

jen_h• 12 years ago

I'm pretty sure that this has been happening at least as early as Mountain Lion. I felt really violated when I discovered it - I use TextEdit as a scratchpad, so it's always full of random notes (and a temporary copy-paste spot for private keys, double-plus-ungood!). Not to mention financial data into Numbers - those were being synced automatically, too.

Another gotcha I noticed around the same time - Notes from iPhone are automatically stored to the primary email account. So I had my private scratchpad phone notes stored on my corp account's Notes folder with no easy and obvious way to re-associate them to the correct account.

It's easy to disable, but as the writer notes, that's not the point - if you don't know it's happening, there's not much you can do, just feel your stomach drop, disable it, then get to work figuring out how much damage was caused (i.e., get to swapping keys, ugh...).

acd• 12 years ago

I do not see any proof in the form of ip addresses to the location where this documents are uploaded and that being part of PRISM.

What IP addresses?

kuschku• 12 years ago

They are uploaded to iCloud, which belongs to Apple. Apple — as an US corporation — has to comply with US laws and has to support ongoing US criminal investigations, including secret agencies.

mcintyre1994• 12 years ago

"Apple has taken local files on my computer not stored in iCloud and silently and without my permission uploaded them to their servers - across all applications, Apple and otherwise."

Presumably they actually did have permission through some ToS you have to agree to if you want to use OSX - which begs the question of what insane amount of permission they actually have here. Seems that it probably boils down to that they can make an argument for literally anything on the mac being useful for continuity, so they can probably upload anything they like by default using that claim?

keithmancuso• 12 years ago

if your so concerns with privacy why are you writing passwords in plain text documents?

mikeash• 12 years ago

A plain text file stored on an encrypted disk image is a pretty decent way to save passwords, as long as you can trust your text editor not to upload your data behind your back (which has generally been a reasonable assumption in the past).

sneak13• 12 years ago

It's worse:

It would appear that iCloud is synchronizing all of the email addresses of people you correspond with, even for non-iCloud accounts, to their recent addresses service. This means that names and email addresss that are not in iCloud contacts, not synchronized to your device, and only available in an IMAP-accessed inbox are now being sent to Apple, silently.

sneak13• 12 years ago

This fact — that your phone is silently syncing third-party email account inbox metadata (sender address lists) to a major US cloud provider — is being downvoted.

Welcome to HN, where blaming the user isn't just our profession, it's our hobby!

_mikz• 12 years ago

It is most probably because of the new Handoff feature, no? Application state is shared between computers.

parasubvert5• 12 years ago

Given this feature has been around for well over a year with eg. TextEdit, I'm amazed at the reaction.

This is exactly the behavior I want and expect from Apple as a user, it would surprise me if they DIDN'T do this.

flatdeviant4• 12 years ago

I'm amazed at the reaction

And I'm baffled by yours, and others' in the thread. With the PRISM/Snowden revelations, Apple still refusing to encrypt their data center links, not using perfect forward secrecy, etc, the cloud simply doesn't seem like a good default.

They could make this opt-in, as it's supposedly linked to Continuity, but it's very clearly unintuitive, as evidenced by others in this thread (https://news.ycombinator.com/item?id=8511115 for one). If even HN people (probably at least the 95th percentile in tech literacy compared to the general pop) didn't know this, then what about your typical PEBKAC user?

And, sorry to be incendiary, but I'm sure the NSA isn't displeased by Apple's UX choice here.

dfc2• 12 years ago

I love it when people get all "incendiary" about a privacy issue in the post-Snowden world. I really do not understand what your privacy world view was in 2009. Did you think governments did not have intelligence agencies? Did you think every government employee was an angel? Did you think F500 companies regarded personal privacy sacrosanct? ?

parasubvert5• 12 years ago

This behavior is completely intuitive to anyone that's used a Mac for the past 5+ years - iCloud has an option for syncing documents and data. Mac OS has been preserving unsaved files since at least Lion, and on iCloud since at least Mavericks. You can opt out of the latter if you like. Or not.

I (and I believe most people) honestly could care less about the NSA. If they want to get at you, they will. Period. There is no technical solution to what is fundamentally a political problem. Most Americans WANT to be spied on, because terror. I don't like it, don't support it, but I'm not losing sleep over it.

SCAQTony• 12 years ago

This may sound naive but it is just bizarre that if you own a computer it is just not really "YOUR" computer anymore. It's like you are "leasing it" but you pay the hardware company with your data.

sneak13• 12 years ago

Does that mean I get the four grand for this maxxed out 15" rMBP back?

aisenik2• 12 years ago

How many hyperbolic, bad faith posts about Yosemite are going to be made and voted to the top at HN? (This is the third I've seen this week, and they all make extremely negative insinuations based on incorrect assumptions and the shallowest possible examination of the functionality being excoriated.)

It appears that the only new functionality in this case is increased visibility via iCloud Drive. Presumably these documents were always saved on iCloud, which has been default behavior when you don't save to the local file system for a while.

As usual, there's an unfounded insinuation that this is intentionally nefarious activity on Apple's part. Documents and Data sync is easily disabled -- what did anyone think it was doing previously?

sneak13• 12 years ago

It's both intentional, and nefarious - separately.

"Intentionally nefarious" implies bad faith - I think it's just wickedly reckless and violates the huge amount of trust that end users place in their OS vendor.

The synchronization of the email recents list across iCloud via recentsd is the big problem. If I add a third-party email account that I access via IMAP, it is not the job of my phone or workstation to send the metadata (sender list) to my OS vendor's servers, even if it does enable the feature of easy address autocomplete on my other devices.

gchokov• 12 years ago

Could this all be related to continuity features? Not all apps support continuity APIs but I suspect we'll be seeing more and more apple stuff working across devices and one way for this work is by using iCloud. iCloud Drive is just an iCloud service.

aisenik2• 12 years ago

No, not directly. If you're logged into iCloud, Documents and Data sync is enabled, the app uses iCloud documents, and you don't save the file locally, the file is saved in iCloud. As far as I recall this is how iCloud has always worked.

DRAGONERO• 12 years ago

Just FYI, are you aware that when you create an email the draft is also stored on the server unless you explicitly choose not to?

All of these things are just normal. It's not like an evil mastermind decided that there was the need to access your unsaved documents.

I mean, you can still get angry about it but it seems pointless since you (probably) already use all of the google services that are available.

Also, a "security researcher" should know better :)

arrrg• 12 years ago

If you enable documents in the cloud (now iCloud Drive, I think) document based apps will pick that location as the default location to save to. Autosave has long been a feature, so that happens, too.

It all makes perfect sense and is perfectly logical. How is it even possible to be surprised by this?! I’m mystified. It’s also not data outside iCloud. It is very much inside iCloud. Obviously. Newly created documents have to be saved somewhere, and if iCloud is your default location that’s exactly where. Where else?!

abalone4• 12 years ago

No.. it happens if you enable iCloud at all, not just iCloud Drive. There is no "enable documents in the cloud" setting.

According to Apple's KB, just signing into iCloud makes iCloud the default location for all unsaved docs (for iCloud-enabled apps).[1] So even if you've just turned on iCloud for photo streams or syncing contacts or whatever, iCloud becomes the default location for all unsaved docs.

[1] http://support.apple.com/kb/TS4372

abalone4• 12 years ago

Number one, if you are using Apple products in a high-security environment (e.g. HIPAA compliance) you should enable 2-factor authentication.[1] This will provide good security for data stored in the cloud.

Number two, there is an easy way to prevent data from ever even touching the cloud. Just immediately save the new document to a local non-iCloud folder before you populate it.

In terms of whether defaulting unsaved docs to iCloud is a good/bad design decision:

Defaulting unsaved documents to the cloud means if someone steals your account login and you don't have 2-factor auth enabled, they can access your unsaved docs.

Defaulting unsaved documents to local storage means continuity doesn't work and kills a lot of value of iCloud.

I think it's a good decision.

[1] http://support.apple.com/kb/ht5570

sneak13• 12 years ago

Continuity is only designed to work within a few meter range for handoff (and indeed requires bluetooth), which could easily be achieved over local bluetooth-bootstrapped p2p wifi.

Red herring.

abalone4• 12 years ago

Continuity data sync happens via iCloud. From the developer docs: "Handoff passes only enough information between the devices to describe the activity itself, while larger-scale data synchronization is handled through iCloud."

Can't say for sure whether a p2p wifi connection would really be an good substitute but I'm skeptical and I bet Apple's thought it through. I know AirDrop works that way but it seems to take a few seconds to set up the connection. Handoff is super fast, in my experience. So since AirDrop is designed to connect with unknown devices that p2p setup performance hit makes sense, but since handoff is for trusted devices, going through iCloud might be faster.

https://developer.apple.com/library/ios/documentation/UserEx...

Someone2• 12 years ago

"those in-progress (not yet explicitly “saved”) documents live in iCloud Drive"

So, what is it? On the drive or outside of it?

Does it matter? I googled a bit, but couldn't determine whether Apple can decrypt that data. It is encrypted both in transit and in the cloud, but do they hold the keys?

I know I have to trust them to do what they say they do, anyways, but if they do not have the keys, they cannot change their mind (say in response to a visit from the NSA)

flatdeviant4• 12 years ago

I know I have to trust them to do what they say they do, anyways, but if they do not have the keys, they cannot change their mind (say in response to a visit from the NSA)

Apple absolutely holds the keys to everything stored on iCloud. See their iOS security whitepaper [1], in the iCloud section:

iCloud
iCloud stores music, photos, apps, calendars, documents, and more, and automatically pushes them to all of a user’s devices. iCloud can also be used by third-party apps to store and sync documents as well as key values for app data as defined by the developer. An iCloud account is configured via the Settings app by the user. iCloud features, including Photo Stream, Documents & Data, and Backup, can be disabled by IT administrators via a configuration profile.
The service is agnostic about what is being stored and handles all files the same way. There are two components for each file. The first is the file’s metadata, which consists of its name, extension, and filesystem permission settings. The second component is the file’s contents, which are treated by iCloud simply as a collection of bytes.
Each file is broken into chunks and encrypted by iCloud using AES-128 and a key derived from each chunk’s contents that utilizes SHA-256. The keys, and the file’s metadata, are stored by Apple in the user’s iCloud account. The encrypted chunks of the file are stored, without any user-identifying information, using third-party storage services, such as Amazon S3 and Windows Azure.

[1] https://www.apple.com/ipad/business/docs/iOS_Security_Feb14....

Someone2• 12 years ago

Thanks. I scanned that, but mixed up the discussion of iCloud and iCloud KeyChain, of which Apple claims:

"iCloud Keychain allows users to securely sync their passwords between iOS devices and Mac computers without exposing that information to Apple."

So, I guess somebody should write a 'notepad' for iOS and Mac OS X that stores its data as secure notes in the KeyChain (assuming that secure notes get synced, too)

IDrive• 12 years ago

Hi, I'm Thomas from IDrive Online Backup. If you're concerned about the privacy of your data while using OS X Yosemite, you might want to consider IDrive as a cloud backup service. We offer 256-bit AES encryption with a private key option so the key to your data is not stored anywhere but locally on your computer. Hope that helps!

dserodio• 12 years ago

I had already regretted upgrading to Yosemite (this thing is ugly), but this is the last drop: I'm going back to Mavericks.

iCloud Uploads Local Data Outside of iCloud Drive

Related Stories