Upgrade to Pro — share decks privately, control downloads, hide ads and more …

iCloud Private Relayに立ち向かう / Confronting iCloud Private Relay

iCloud Private Relayに立ち向かう / Confronting iCloud Private Relay

2021年7月15日(木)に開催されたNuCon mini 2021 Summerの発表資料です。

▼発表動画アーカイブ
https://www.youtube.com/watch?v=kboFQ1VIMFE&t=596s

3e77f9dbec6a87756d1dbdddab283aee?s=128

Nulab Inc.
PRO

July 15, 2021
Tweet

Transcript

  1. iCloud Private Relayʹ ཱͪ޲͔͏ Nulab Inc., at NuCon mini 2021

    Summer 1
  2. ࣗݾ঺հ • ٢ా ଠҰ࿠ / Taichiro Yoshida / @dataich •

    TypetalkνʔϜΤϯδχΞ • iOSΞϓϦ - Swift • όοΫΤϯυ - Scala • ່2ਓ • ήʔϜʢ΢ΠΠϨɺΦʔϓϯϫʔϧυARPGʣ • ࠷ۙ͸Ωϟϯϓ Nulab Inc., at NuCon mini 2021 Summer 2
  3. iCloud Private Relayͱ͸ • Ϣʔβʔͷߦಈ؂ࢹΛ๷͙AppleͷαʔϏε • iCloud+ αϒεΫϦϓγϣϯܖ໿ऀʹఏڙ • σϑΥϧτͰ༗ޮΒ͍͠ʢެࣜιʔε͕ݟ͔ͭΒͳ͍ʣ

    • iOS 15 / macOS Monterey Nulab Inc., at NuCon mini 2021 Summer 3
  4. Ͳ͏ಈ͘ʁ Nulab Inc., at NuCon mini 2021 Summer 4

  5. iCloud Private Relay͕ແޮͳ৔߹ Nulab Inc., at NuCon mini 2021 Summer

    5
  6. • IPΞυϨεͱΞΫηεઌ΢ΣϒαΠτʹ͍ͭͯΈΜͳ஌͍ͬͯΔ • ΫϥΠΞϯτ • ϓϩόΠμ • αʔόʔ • ໌ࣔతͳڐՄΛಘͣʹҐஔ৘ใʢIPΞυϨεʣΛ஌Δ͜ͱ͕Ͱ͖Δ

    • CookieʹΑΔϑΟϯΨʔϓϦϯτ͸֤ϒϥ΢β͕ରࡦ͖ͯͨ͠ʢSafariͰ͸ Intelligent Tracking Preventionʣ • ͦΕͰ΋IPΞυϨεʹΑΔϑΟϯΨʔϓϦϯτ͸๷͍͛ͯͳ͍ • VPNΛར༻ͨ͠ͱͯ͠΋ɺͦͷࣄۀऀʹ͸৘ใʢIPΞυϨεɺΞΫηεઌ΢Σϒα Πτʣ͕࢒Δ Nulab Inc., at NuCon mini 2021 Summer 6
  7. iCloud Private Relay͕༗ޮͳ৔߹ Nulab Inc., at NuCon mini 2021 Summer

    7
  8. • ΫϥΠΞϯτ͸AppleͷIngress ProxyʹϦΫΤετ͢Δ • IPΞυϨε͸ϓϩόΠμͱ1ͭΊͷϓϩΩγʢIngressʣ͕஌Δ͜ͱʹͳΔɻυϝ Πϯ͸҉߸Խ͞Εͨঢ়ଶͰอ࣋͢ΔͷͰΘ͔Βͳ͍ɻ • 2ͭΊͷϓϩΩγʢEgressʣ͸IngressͷIPΞυϨεͱ҉߸Խ͞ΕͨυϝΠϯΛ ΋Β͏ɻΫϥΠΞϯτͷIPΞυϨε͸෼͔Βͳ͍ɻυϝΠϯΛ෮߸͠iCloud Private

    Relay͕஍Ҭ͝ͱʹϓʔϧ͍ͯ͠ΔIPΛ࢖͍ɺWebͷϦΫΤετΛॲཧɻ • ΢ΣϒαΠτ͸Egress͕બΜͩIP͔͠෼͔Βͳ͍ɻ • ͜ͷϑϩʔͷதʹIPΞυϨεͱΞΫηεઌ΢ΣϒαΠτͷ྆ํΛಉ࣌ʹ஌ͬͯ ͍Δࣄۀऀ͸͍ͳ͍ঢ়ଶʢAppleͰ͑͞஌Βͳ͍ʣ • IPΞυϨεʹΑΔϑΟϯΨʔϓϦϯτ͕ഉআ͞ΕΔɻ Nulab Inc., at NuCon mini 2021 Summer 8
  9. Webαʔόʔͷ४උ Nulab Inc., at NuCon mini 2021 Summer 9

  10. ΍Δ΂͖͜ͱ Nulab Inc., at NuCon mini 2021 Summer 10

  11. Geolocation DBΛߋ৽͢Δ • IPΞυϨεϕʔεͰͷ஍Ҭ৘ใͷऔಘ͸͜Ε·Ͱ௨Γಈ࡞͢ Δɻ • ͦΕΛਖ਼͘͠ಈ࡞ͤ͞ΔͨΊiCloud Private Relay͕࣋ͭIPΞ υϨεͷGeolocationΛ൓өͤ͞Δ

    Nulab Inc., at NuCon mini 2021 Summer 11
  12. ΍ͬͨ΄͏͕Α͍͜ͱ • IPΞυϨεϕʔεͰͷೝূ΍Ґஔ৘ใऔಘ͸΍ΊΑ͏ • Ґஔ৘ใ͸Geolocation APIͰ໌ࣔతʹ΋Β͏ɻ • QUIC΍HTTP/3ʹରԠ͢Δ • ඞਢͰ͸ͳ͍͚ͲɺηΩϡϦςΟ໘ɺύϑΥʔϚϯε໘ͰApple

    ͕ਪ঑͍ͯ͠Δɻ • IPΞυϨε͕ه࿥Ͱ͖ͳ͍͜ͱΛαʔϏεͱͯ͠ྑ͠ͱ͢Δ͔͸൑ அ͕ඞཁɻ Nulab Inc., at NuCon mini 2021 Summer 12
  13. iOSΞϓϦͷ४උ Nulab Inc., at NuCon mini 2021 Summer 13

  14. ΍Δ΂͖͜ͱ • ͋·Γͳ͍ • Ϣʔβʔ͕iCloud+΁Ճೖ͠ɺiCloud Private Relay͕༗ޮʹ ͳ͍ͬͯΕ͹ࣗಈతʹద༻͞ΕΔ • ϩʔΧϧωοτϫʔΫɺϓϥΠϕʔτυϝΠϯɺVPNɾϓϩ

    Ωγઃఆͯͨ͠Γ͢ΔҰ෦ͷ௨৴ʹ͸ద༻͞Εͳ͍ Nulab Inc., at NuCon mini 2021 Summer 14
  15. ΍ͬͨ΄͏͕Α͍͜ͱ • URLSessionͱ͔NWConnection࢖ͬͯͨ΄͏͕iCloud Private Relay ͷHTTPτϥϑΟοΫͷσόοάͱ͔͠΍͍͔͢Β৐Γ׵͑ਪ঑ • Ґஔ৘ใ͸Core Location APIͳͲΛ࢖ͬͯ໌ࣔతʹऔಘ͢Δ

    • ηΩϡΞͰͳ͍௨৴͸iCloud Private Relay͕ࣗಈతʹηΩϡΞʹ͠ ͯ͘ΕΔ • ͚ͲΤϯυπʔΤϯυͰηΩϡΞͳͷ͕ϕετ͔ͩΒHTTP΍Ί ͯ΄͍͠ Nulab Inc., at NuCon mini 2021 Summer 15
  16. iCloud Private Relay΁ ͷΞΫηεͷϒϩοΫ͕ ඞཁͳέʔε Nulab Inc., at NuCon mini

    2021 Summer 16
  17. ΍Δ΂͖͜ͱ • ඞཁʹԠͯ͡iCloud Private Relay΁ͷΞΫηεͷϒϩοΫΛݕ౼͢Δ • اۀ΍ֶߍͷαʔόʔͳͲͰωοτϫʔΫͷ؂ࢹͳͲ͕ඞཁͳ৔߹ • ΞΫηεઌͷ΢ΣϒαΠτͷ؂ࢹ͕Ͱ͖ͳ͍ •

    ར༻͍ͯ͠ΔWebαʔϏεͰIPΞυϨεͰͷΞΫηε੍ݶΛ༗ޮʹ͍ͯ͠Δ • iCloud Private RelayͷIP͔Β͸ΞΫηεͰ͖ͳ͘ͳͬͯ͠·͏ɻ • ωοτϫʔΫ؅ཧऀͳͲ • ఏڙ͍ͯ͠ΔWebαʔϏεͰIPΞυϨεͰͷΞΫηε੍ݶΛఏڙ͍ͯ͠Δ • ར༻ऀʹࣄલʹ஌Β͓ͤͯ͘ɻ • SaaSαʔϏεఏڙऀͳͲ Nulab Inc., at NuCon mini 2021 Summer 17
  18. ϒϩοΫ͢Δํ๏ • ҎԼͷϗετ໊ͷ໰͍߹Θͤ͸ωοτϫʔΫ಺ͷDNSϦκϧό ͰෆࡏԠ౴Λฦ͢ɻλΠϜΞ΢τͤͨ͞Γɺύέοτͷυϩο ϓͩͱԠ౴͕஗͘ͳΔͷͰ΍Ίͨ΄͏͕ྑ͍ɻ • mask.icloud.com • mask-h2.icloud.com •

    ͜ΕΛߦ͏ͱiOS͕ࣗಈతʹϢʔβʔʹϓϩϯϓτग़ͯ͠ɺ Ϣʔβʔ͕iCloud Private RelayΛར༻Λճආ͢Δ͔બ୒Ͱ͖Δ Nulab Inc., at NuCon mini 2021 Summer 18
  19. EϝʔϧτϥοΩϯά Nulab Inc., at NuCon mini 2021 Summer 19

  20. ΍ͬͨ΄͏͕Α͍͜ͱ • ஍Ҭಛఆʹҧ͍͕ͰΔ͔΋͠Εͳ͍ͷͰݕ౼͢Δ • ஍Ҭ͝ͱʹϓʔϧ͍ͯ͠ΔIP͸ݶΒΕ͍ͯΔ͔ΒɺΤϦΞ͸޿͕Δ͸ ͣ • Hide My EmailΛར༻͍ͯ͠ΔΞΧ΢ϯτͷ৔߹͸ɺEϝʔϧͷ։෧ঢ়گ

    ΍։෧͕࣌ؒ౰ͯʹͳΒͳ͍͜ͱΛ஌͓ͬͯ͘ɻ • ྆ํͱ΋ݱ࣌఺Ͱ͸ར༻ऀ਺తʹޡࠩͷൣғͩͱࢥ͏͕ɺࠓޙͷΠϯ λʔωοτ͸͜ͷลΓͷτϥοΩϯάख๏͕࢖͑ͳ͍ํ޲ʹਐΜͰ͍Δ ͱࢥΘΕΔɻ Nulab Inc., at NuCon mini 2021 Summer 20
  21. ࢀߟ • Prepare Your Network for iCloud Private Relay •

    Get ready for iCloud Private Relay • Apple’s privacy pillars in focus ਖ਼ࣜϦϦʔε࣌ʹ͸มߋɾఫճ͞Ε͍ͯΔՄೳੑ΋͋ΔͷͰ͝ ྃঝ͍ͩ͘͞ɻ Nulab Inc., at NuCon mini 2021 Summer 21
  22. ͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ Nulab Inc., at NuCon mini 2021 Summer 22