Apple to Scan Publicly Shared iCloud Links for Harmful Content Starting iOS 17.3
Apple will begin checking content shared via the "Anyone with the Link" iCloud sharing option for harmful material, starting with iOS 17.3, iPadOS, macOS, and visionOS 17.3 or later. The policy, disclosed in an Apple support document published November 3, 2026, applies only to publicly accessible iCloud Photos and iCloud Drive links, not to private content or data protected by Advanced Data Protection. Apple clarifies that items shared this way lose end-to-end encryption to enable the sharing mechanism, creating an exception even when Advanced Data Protection is enabled at the account level. Enforcement may include removing or modifying flagged content, disabling Apple Accounts, blocking re-registration with the same email or phone number, and involving law enforcement when necessary.
Detalhes técnicos
The document does not specify detection technologies, harmful-content categories, hash-matching methods, or whether scanning occurs on-device or server-side. The scope is explicitly limited to the "Anyone with the Link" sharing mode; "People You Choose" and "Send a Copy" options are not described as subject to the same inspection. Regional availability of the feature may vary.
Remediação
Security teams should note that the relevant boundary is the specific sharing permission applied to each item (public link vs. restricted recipients), not simply whether Advanced Data Protection is enabled on the account.
Linha do tempo
-
Apple to Scan Publicly Shared iCloud Links for Harmful Content Starting iOS 17.3
ler a análise desta fonte ocultar
Apple will begin checking content shared via the "Anyone with the Link" iCloud sharing option for harmful material, starting with iOS 17.3, iPadOS, macOS, and visionOS 17.3 or later. The policy, disclosed in an Apple support document published November 3, 2026, applies only to publicly accessible iCloud Photos and iCloud Drive links, not to private content or data protected by Advanced Data Protection. Apple clarifies that items shared this way lose end-to-end encryption to enable the sharing mechanism, creating an exception even when Advanced Data Protection is enabled at the account level. Enforcement may include removing or modifying flagged content, disabling Apple Accounts, blocking re-registration with the same email or phone number, and involving law enforcement when necessary.
Technical Details
The document does not specify detection technologies, harmful-content categories, hash-matching methods, or whether scanning occurs on-device or server-side. The scope is explicitly limited to the "Anyone with the Link" sharing mode; "People You Choose" and "Send a Copy" options are not described as subject to the same inspection. Regional availability of the feature may vary.
Remediation
Security teams should note that the relevant boundary is the specific sharing permission applied to each item (public link vs. restricted recipients), not simply whether Advanced Data Protection is enabled on the account.