{"id":6684,"date":"2019-10-14T18:13:16","date_gmt":"2019-10-14T16:13:16","guid":{"rendered":"https:\/\/www.apfelpatient.de\/?p=6684"},"modified":"2025-02-06T08:04:27","modified_gmt":"2025-02-06T07:04:27","slug":"safari-data-from-iphone-users-can-end-up-in-china","status":"publish","type":"post","link":"https:\/\/www.apfelpatient.de\/en\/news\/safari-daten-von-iphone-nutzern-koennen-in-china-landen","title":{"rendered":"Safari – Daten von iPhone-Nutzern k\u00f6nnen in China landen [ Update ]"},"content":{"rendered":"

It's a change that Apple made quietly and was certainly well-intentioned - but an announcement would have been better.<\/strong><\/p>\n

As many people know, Safari includes the "fraud warning" feature. If the function is activated, it warns users about phishing sites. In order to identify such websites, data is exchanged with "Google Safe Browsing". The data of the website accessed and the IP address of the iPhone user are sent. But now another company is said to have been brought in. The Chinese company Tencent is talking about. The quiet innovation in iOS is certainly well-intentioned and is intended to protect iPhone users - but Apple should have communicated this openly. Apple has been using Google's Safe Browsing technology for many years to protect iPhone users from fraudulent websites, and with success. If Google's system detects a problem, the user is shown a warning in Safari - the user is advised not to visit the site - they can then turn around or continue.<\/p>\n

\u201cGoogle Safe Browsing\u201d & \u201cTencent Safe Browsing\u201d<\/strong><\/p>\n

However, as has now become known, the function has been expanded under iOS 13 - to Apple's disadvantage. Accordingly, the "fraud warning" feature now uses "Google Safe Browsing" and "Tencent Safe Browsing". This means that iPhone users' data could also be sent to China. Apple writes in the updated privacy policy:<\/p>\n

"Before opening a website, Safari may send information about that site to Google Safe Browsing and Tencent Safe Browsing to make sure the site is legitimate. Providers that enable private browsing may also log your IP address."<\/em><\/p>\n

\"Screenshot:
Screenshot: Apfelpatient<\/figcaption><\/figure>\n

\u201cGoogle has appropriate protective measures in place\u201d<\/strong><\/p>\n

The professor and cryptographer Matthew Green<\/a> According to the company, the function can be problematic because it sends the IP address in addition to the website data and sets a cookie. This enables a profile to be created about the general surfing behavior of the respective user. Data protection advocates find the change questionable because China can now also obtain such information. However, there are indications that such data is only sent to Tencent if iPhone users have set their region to China - but there is no concrete evidence of this so far. Google, however, is less skeptical in this regard because the company has appropriate protective measures in place. Green explains these as follows:<\/p>\n

\u201cGoogle quickly came up with a more secure approach to \u2018safe browsing\u2019. The new approach is called \u2018Update API\u2019 and works like this:<\/em><\/p>\n