How to Not Back Up Your Naked Selfies to the Cloud

The Citizen's Guide to the Future
Sept. 2 2014 3:52 PM

How to Not Back Up Your Naked Selfies to the Cloud

iCloud settings
Many smartphone users don't realize they're automatically storing their photos on remote servers.

Screenshot

Pop quiz:

  1. Are you automatically backing up your smartphone photos to the cloud?
  2. Are you sure?
Will Oremus Will Oremus

Will Oremus is Slate's senior technology writer.

Advertisement

If you answered “no” and “yes,” congratulations: Your selfies are probably safe from the sort of hack that exposed nude photos of actress Jennifer Lawrence, model Kate Upton, and several others this past weekend.

If you answered “yes” and “yes,” you might want to read on. And if you answered anything else—including “I have no idea”—you should stop reading right now and find out the answer before you go any farther.

(On an iPhone, go to “Settings -> iCloud -> Photos.” If “My Photo Stream” is on, you’ve been backing up your photos to the cloud. On an Android phone, open the Photos app and select “Settings.” If “Auto Backup” is on, your photos are on the cloud.)

It’s still not fully clear exactly how all the celebrity photos published this weekend were leaked and assembled. One theory is that at least some were obtained by hackers using a “brute-force” attack on the victims’ Apple iCloud accounts. That means they used specially designed software to guess hundreds, thousands, or even millions of common passwords for each targeted celebrity, and eventually the software guessed right. If accurate, this suggests some serious negligence on the part of Apple’s security team. It also implies that millions of other Apple customers would have been vulnerable to similar attacks, had someone decided to target them.

Another possibility is that the hackers somehow sussed out the celebrities’ passwords or security questions themselves, perhaps through individually tailored phishing schemes. Either way, once they were in, the hackers would have had access to all the files that were stored on those accounts.

The most disturbing part is that, in many cases, the victims probably didn’t even realize they had racy photos stored on remote servers. I think this quote from a May red-carpet interview with Lawrence is typical of how a lot of Apple users relate to the company’s iCloud service.

That’s understandable. Many of us are still struggling to understand what the cloud is, let alone how and when to use it. And big tech companies have worked hard to train us simply trust in their software without understanding how it works. Apple in particular proudly eschews instruction manuals for its high-tech gadgets.

These companies want us to feel confident storing all our files on their remote servers so that we can use them on all our different devices. “Seamless” is a favorite word of tech PR types. That’s why Apple backs up your files to iCloud by default. It wants you to be able to see the same photos on your MacBook that you see on your iPhone, and it doesn’t want you to have to worry about it. “You barely have to do a thing,” Apple brags.

This weekend’s hacks are a reminder that you should worry about it, at least a little. Think of it this way, suggests security blogger Graham Cluley: When you’re backing something up to the cloud, you’re essentially backing it up to someone else’ computer.

In general, it’s true that Apple and the other above-named tech companies work hard to secure the data that we store in the cloud. Security breaches are bad for their business. But it’s also bad for their business when their users get confused, or have to do more work than they’re accustomed to in order to gain access to their own data. For instance, two-factor authentication—which requires you to type in a second special code along with your password whenever you log in from a new device—can be a hassle. And so there’s a temptation to err on the side of convenience rather than security.

I’m not saying you should never back up your photos to the cloud. Cloud storage is an incredibly handy tool for all sorts of purposes, including backing up files you don’t want to lose. To be clear, I’m also not blaming the victims in this case—they did nothing to deserve this illegal privacy invasion.

What I am saying is that we should all think twice before allowing any service to back up our photos to the cloud automatically on an ongoing basis. Once you’ve allowed that, it’s very easy to forget that you’ve done it, and upload something you’d really rather keep private. Auto-backup is a one-size-fits-all solution, and not all data is created equal.  

Rather, storing something to the cloud should be an intentional act, like attaching it to an email or posting on Facebook. Choose certain types of files and photos to live in the cloud and make sure you choose the appropriate level of encryption for each. Two-factor authentication is a must for any account that includes potentially sensitive data. And try to be aware when you’re using a cloud-based service like Gmail or Dropbox that, despite those companies’ best efforts, anything you store there is potentially vulnerable, not only to far-away hackers but to any friends, colleagues, and loved-ones who might have or guess your password.

Storing everything locally isn’t foolproof either, since your phone or computer could always be lost or stolen. But at least if that happens, at least you’ll know you’ve lost it and can take steps to defend yourself.                           

Previously in Slate:

Future Tense is a partnership of SlateNew America, and Arizona State University.

TODAY IN SLATE

Politics

Talking White

Black people’s disdain for “proper English” and academic achievement is a myth.

Hong Kong’s Protesters Are Ridiculously Polite. That’s What Scares Beijing So Much.

The One Fact About Ebola That Should Calm You: It Spreads Slowly

Operation Backbone

How White Boy Rick, a legendary Detroit cocaine dealer, helped the FBI uncover brazen police corruption.

A Jaw-Dropping Political Ad Aimed at Young Women, Apparently

The XX Factor
Oct. 1 2014 4:05 PM Today in GOP Outreach to Women: You Broads Like Wedding Dresses, Right?
Music

How Even an Old Hipster Can Age Gracefully

On their new albums, Leonard Cohen, Robert Plant, and Loudon Wainwright III show three ways.

How Tattoo Parlors Became the Barber Shops of Hipster Neighborhoods

This Gargantuan Wind Farm in Wyoming Would Be the Hoover Dam of the 21st Century

Moneybox
Oct. 1 2014 8:34 AM This Gargantuan Wind Farm in Wyoming Would Be the Hoover Dam of the 21st Century To undertake a massively ambitious energy project, you don’t need the government anymore.
  News & Politics
Politics
Oct. 1 2014 7:26 PM Talking White Black people’s disdain for “proper English” and academic achievement is a myth.
  Business
Buy a Small Business
Oct. 1 2014 11:48 PM Inking the Deal Why tattoo parlors are a great small-business bet.
  Life
Dear Prudence
Oct. 2 2014 6:00 AM Can’t Stomach It I was shamed for getting gastric bypass surgery. Should I keep the procedure a secret?
  Double X
The XX Factor
Oct. 1 2014 5:11 PM Celebrity Feminist Identification Has Reached Peak Meaninglessness
  Slate Plus
Behind the Scenes
Oct. 1 2014 3:24 PM Revelry (and Business) at Mohonk Photos and highlights from Slate’s annual retreat.
  Arts
Brow Beat
Oct. 1 2014 9:39 PM Tom Cruise Dies Over and Over Again in This Edge of Tomorrow Supercut
  Technology
Future Tense
Oct. 1 2014 6:59 PM EU’s Next Digital Commissioner Thinks Keeping Nude Celeb Photos in the Cloud Is “Stupid”
  Health & Science
Science
Oct. 1 2014 4:03 PM Does the Earth Really Have a “Hum”? Yes, but probably not the one you’re thinking.
  Sports
Sports Nut
Oct. 1 2014 5:19 PM Bunt-a-Palooza! How bad was the Kansas City Royals’ bunt-all-the-time strategy in the American League wild-card game?