thoughts on Apple’s private relay?

Reply to this note

Please Login to reply.

Discussion

???

It’s a vpn from apple

Not really a VPN in that it only works with safari and apple apps. Useless if you use another browser so it doesn’t really negate the need for a vpn.

that was exactly my thought, too

Too much trust in one corporate

Interesting

Seems everyone will be acknowledging decentralisation sooner or later āœ…

ā€œNo single party has access to both user’s IP and details of browsing activityā€ - seems like just one less data point to me. Does it increase privacy - yes. Is it a silver bullet - no. Not same but similar vibes:

Decentralize to stay competitive what a narrative fuck yeah boysssss

interesting

Trust me! It is a your private relay, but I operate it. Trust me!

Garbage šŸ—‘ļø

What u mean?

What’s the relay name?

Eh I'll stick with Mullvad

Pro:

Fast, reliable VPN light

Con:

Not really clear how it is setup or how secure it really is.

You telling me Apple has a private relay to play with Nostr? Big names looking into Nostr is unavoidable.

Excuse the note above, I am high after some tea and currently writing from the future

Tested it for a week, hate it.

Never trust apple

nothing good can come from it

we want to further decentralisation, not minimise it

Love the concept but too much work to reliably keep on, messes with many apps

On nostr? Or is it a thing on their own campus?

Private Relay is legit - especially when you forget to turn vpn on while traveling and using rando wifi - browser centric is the only drawback - as far as i know apps are wide open still

For the lazy. Or confused, as it's not about Nostr relays.

Trusted third parties are security holes. Happy 420.

Couldn’t find much information on it. Wasn’t the best experience

Better than nothing at all but not as secure as a VPN.

Oh, I understand. What would happen if...

I have it on my iOS devices. Doesn't seem to impact anything but I don't exactly trust it not to keep logs etc either.

Neat for normies.

Don’t like that it’s closed source and only works with Safari, those two things are deal breakers for me.

I run everything through IVPN.

It fights with mullvad unfortunately

You mean like a damus clone? Maybe Apple wants that sweet sweet 30% cut from their apps (impossible to grab via decentralized āš”ļø service)

Because it’s on millions of devices and active for everyone who pays for iCloud, your anonymity set is extremely large.

Also, my mother now has a vpn without knowing what it is or why it’s good. But it just works.

There are thoughts?

What?

Apple or apple users?

It’s a glorified privoxy

All good 🤷

There’s a known issue where it leaks data when paired with some vpns - better than nothing for most though

They will still sell our private data to advertisers.

Expensive

If icloud knows who you are by your IP, and you can't use a VPN, then you leak your identity against your public key. At that point apple has an assymetric information set that every government would want to link a pubkey against an apple ID. Is this supposed to be a good thing?

is it open source?

it's sad to realize no company that got big enough in the last decade can be truly trusted in terms of privacy, only software you run yourself, but I always believed Apple was doing things for the good reasons, but I know there will be a day where I'll be much disappointed with them

thoughts...? You cause ppl to think, that is good. End users need it to be transparently simple, they dont want to know how things work. When we can make geeky things simple, then we get mass adoption.

Forgot about it until now. I tried it very early on. Seemed to cause lots of routing problems.

Part of their Cloud offering, I could see it happening.

I trust apple like a big brother. As much as I trust that Google don't be evil.

Nope.

#[0]

Hard to know.

I think it is better not use.

Less cool than when Winston Privacy tried the same thing (https://shop.winstonprivacy.com/) with its ā€œPi-hole PLUS decentralized VPNā€. RIP. Would love to see Umbrel try something similar.

Since it’s not open source, can we trust it? Assume you could test in/out, but question the reliability.

It’s better than nothing.

Does #[1] seriously not know this is #zapathon time?

Apple x Nostr would destroy Twitter. How many old people you know just use apple just because they dont understand technology? It would be like going from dial up to broadband when it comes to adoption of nostr.

Been using it since implementation. Seems to work?

By an order of magnitude the best VPN in existence, most importantly because your cohort is normies. And I absolutely despise Cloudflare and think they’re evil.

(I’ve never used it, it may be jank, but the dragon is absolutely great)

Design lol

The whole video is worth a watch. But jump to around 24:30 for details on how it works. https://developer.apple.com/wwdc21/10085

Nothing wrong with anonymizing internet traffic if you can deal with the performance hit.

Feels great in theory but slows me down more often than not

Only works on Safari traffic I believe.

My thoughts on it: It’s not private

I don't trust Apple with privacy. So anything they label private automatically gets taken with a grain of salt

What’s not to like?

Using it right now, since it’s not tunneling my data like a VPN I trust it. It helps preventing being tracked, switching cities every few min when checking with iplocation.net .. some services (for example a postal checkout service) act weird when its enabled

Evidently this only works for safari,

not all internet connections

anyone know if this affects web sockets or performance thereof?

No idea but I’ve had it enabled before I found out about Nostr and it’s been fine.

I haven’t noticed any performance degradation

It’s been fine for me. The only negative effect I’ve noticed is that I couldn’t edit Wikipedia pages with it on.

i don’t think that there will be a performance penalty, as some parts of the infrastructure also use cloudflare… and they have a very good backbone environment and also good websocket knowledge.

I’ve found it messes up stuff for me sometimes so I usually leave it off

As is, it's pretty cool. But I wish it was system wide, not just in Safari. Also shouldn't be region-restricted. And if it was an open standard and more providers were doing this that would be ideal.

Is there such a thing as Apple and private?

I don't know about that, but from a principal view it seems questionable.

Great

I switched to safari because of it. Seems to have limited impact on site loading performance or battery life. There are some sites that may not load up. They easily load up in edge or chrome, but these are also sites overloaded with trackers/cookies

Pretty good, it’s a free vpn that (in my testing) does pretty good for masking my location from the start (most people don’t turn on their VPN until before they use it, Apple’s is always on)

Very strong service. It comes in handy alongside Mullvad for sites that explicitly block VPN connections.

It’s interesting because no party ever has the full picture. The ingress proxy (Apple) can see your IP, and the egress proxy (Cloudflare, Akamai, Fastly) can see the content you request; but crucially neither proxy can see both.

A little known detail is that insecure HTTP traffic from apps is also routed through Private Relay.

Even Apple Mail doesn't work when it's on.