When the Apple intelligence functions will be released to the first users in the autumn, many users will probably ask themselves what data security looks like. Apple has made various declarations here: for example, as much AI as possible should run locally on the individual device and server outsourcing should be completely protected for private cloud computing. But how does Apple compare to the competition from Google and Samsung? Well-known security researcher Bruce Schneier has now made an initial assessment.
Advertisement
Security infrastructure is good, but what about OpenAI?
to Wired magazine The expert, who now works as head of security architecture at the Tim Berners-Lee Foundation Inrupt, said that this is clearly a “very impressive privacy system”. The goal is that the cloud should be no less secure than the iPhone, “There are a lot of moving parts, but I think they have solved it very well.” However, Apple also integrates ChatGPT on request. There was heavy criticism here from X boss Elon Musk because Apple data could end up with OpenAI.
Schneier said that Apple removes identifying information before sending the request. However, the problem is that many queries themselves contain a lot of identifying information. Then everything depends on OpenAI’s rules. Apple is not the only company that wants to run as many AI applications as possible locally; for example, Google has corresponding “small” models. However, this hybrid AI still lacks an approach like PCC. Google emphasizes that it implements “strong security measures” in its data centers. You also do not send any data to third parties.
Private cloud compute under security scrutiny with bug bounties
Apple plans to use PCC and on-device AI from third-party security experts to check. There will be a “PCC Virtual Research Environment” and binary images of each PCC build will also be published. The bootloader and firmware are published as plain text. The company is also setting up a new bug bounty program, which will likely have a high payout.
The question raised by Schneier is interesting: how is OpenAI technology integrated into the system. The company has recently demonstrated that it is very careful when it comes to security: the macOS version of ChatGPT, the first official desktop client, saves chat data in plain text on an SSD.
(B.Sc.)
