iCloud Private Relayに立ち向かう / Confronting iCloud Private Relay

2021年7月15日(木)に開催されたNuCon mini 2021 Summerの発表資料です。

▼発表動画アーカイブ
https://www.youtube.com/watch?v=kboFQ1VIMFE&t=596s

Transcript

1. iCloud Private Relayʹ ཱͪ޲͔͏ Nulab Inc., at NuCon mini 2021 Summer 1
2. ࣗݾ঺հ • ٢ా ଠҰ࿠ / Taichiro Yoshida / @dataich • TypetalkνʔϜΤϯδχΞ • iOSΞϓϦ - Swift • όοΫΤϯυ - Scala • ່2ਓ • ήʔϜʢ΢ΠΠϨɺΦʔϓϯϫʔϧυARPGʣ • ࠷ۙ͸Ωϟϯϓ Nulab Inc., at NuCon mini 2021 Summer 2
3. iCloud Private Relayͱ͸ • Ϣʔβʔͷߦಈ؂ࢹΛ๷͙AppleͷαʔϏε • iCloud+ αϒεΫϦϓγϣϯܖ໿ऀʹఏڙ • σϑΥϧτͰ༗ޮΒ͍͠ʢެࣜιʔε͕ݟ͔ͭΒͳ͍ʣ • iOS 15 / macOS Monterey Nulab Inc., at NuCon mini 2021 Summer 3
4. Ͳ͏ಈ͘ʁ Nulab Inc., at NuCon mini 2021 Summer 4
5. iCloud Private Relay͕ແޮͳ৔߹ Nulab Inc., at NuCon mini 2021 Summer 5
6. • IPΞυϨεͱΞΫηεઌ΢ΣϒαΠτʹ͍ͭͯΈΜͳ஌͍ͬͯΔ • ΫϥΠΞϯτ • ϓϩόΠμ • αʔόʔ • ໌ࣔతͳڐՄΛಘͣʹҐஔ৘ใʢIPΞυϨεʣΛ஌Δ͜ͱ͕Ͱ͖Δ • CookieʹΑΔϑΟϯΨʔϓϦϯτ͸֤ϒϥ΢β͕ରࡦ͖ͯͨ͠ʢSafariͰ͸ Intelligent Tracking Preventionʣ • ͦΕͰ΋IPΞυϨεʹΑΔϑΟϯΨʔϓϦϯτ͸๷͍͛ͯͳ͍ • VPNΛར༻ͨ͠ͱͯ͠΋ɺͦͷࣄۀऀʹ͸৘ใʢIPΞυϨεɺΞΫηεઌ΢Σϒα Πτʣ͕࢒Δ Nulab Inc., at NuCon mini 2021 Summer 6
7. iCloud Private Relay͕༗ޮͳ৔߹ Nulab Inc., at NuCon mini 2021 Summer 7
8. • ΫϥΠΞϯτ͸AppleͷIngress ProxyʹϦΫΤετ͢Δ • IPΞυϨε͸ϓϩόΠμͱ1ͭΊͷϓϩΩγʢIngressʣ͕஌Δ͜ͱʹͳΔɻυϝ Πϯ͸҉߸Խ͞Εͨঢ়ଶͰอ࣋͢ΔͷͰΘ͔Βͳ͍ɻ • 2ͭΊͷϓϩΩγʢEgressʣ͸IngressͷIPΞυϨεͱ҉߸Խ͞ΕͨυϝΠϯΛ ΋Β͏ɻΫϥΠΞϯτͷIPΞυϨε͸෼͔Βͳ͍ɻυϝΠϯΛ෮߸͠iCloud Private Relay͕஍Ҭ͝ͱʹϓʔϧ͍ͯ͠ΔIPΛ࢖͍ɺWebͷϦΫΤετΛॲཧɻ • ΢ΣϒαΠτ͸Egress͕બΜͩIP͔͠෼͔Βͳ͍ɻ • ͜ͷϑϩʔͷதʹIPΞυϨεͱΞΫηεઌ΢ΣϒαΠτͷ྆ํΛಉ࣌ʹ஌ͬͯ ͍Δࣄۀऀ͸͍ͳ͍ঢ়ଶʢAppleͰ͑͞஌Βͳ͍ʣ • IPΞυϨεʹΑΔϑΟϯΨʔϓϦϯτ͕ഉআ͞ΕΔɻ Nulab Inc., at NuCon mini 2021 Summer 8
9. Webαʔόʔͷ४උ Nulab Inc., at NuCon mini 2021 Summer 9
10. ΍Δ΂͖͜ͱ Nulab Inc., at NuCon mini 2021 Summer 10
11. Geolocation DBΛߋ৽͢Δ • IPΞυϨεϕʔεͰͷ஍Ҭ৘ใͷऔಘ͸͜Ε·Ͱ௨Γಈ࡞͢ Δɻ • ͦΕΛਖ਼͘͠ಈ࡞ͤ͞ΔͨΊiCloud Private Relay͕࣋ͭIPΞ υϨεͷGeolocationΛ൓өͤ͞Δ Nulab Inc., at NuCon mini 2021 Summer 11
12. ΍ͬͨ΄͏͕Α͍͜ͱ • IPΞυϨεϕʔεͰͷೝূ΍Ґஔ৘ใऔಘ͸΍ΊΑ͏ • Ґஔ৘ใ͸Geolocation APIͰ໌ࣔతʹ΋Β͏ɻ • QUIC΍HTTP/3ʹରԠ͢Δ • ඞਢͰ͸ͳ͍͚ͲɺηΩϡϦςΟ໘ɺύϑΥʔϚϯε໘ͰApple ͕ਪ঑͍ͯ͠Δɻ • IPΞυϨε͕ه࿥Ͱ͖ͳ͍͜ͱΛαʔϏεͱͯ͠ྑ͠ͱ͢Δ͔͸൑ அ͕ඞཁɻ Nulab Inc., at NuCon mini 2021 Summer 12
13. iOSΞϓϦͷ४උ Nulab Inc., at NuCon mini 2021 Summer 13
14. ΍Δ΂͖͜ͱ • ͋·Γͳ͍ • Ϣʔβʔ͕iCloud+΁Ճೖ͠ɺiCloud Private Relay͕༗ޮʹ ͳ͍ͬͯΕ͹ࣗಈతʹద༻͞ΕΔ • ϩʔΧϧωοτϫʔΫɺϓϥΠϕʔτυϝΠϯɺVPNɾϓϩ Ωγઃఆͯͨ͠Γ͢ΔҰ෦ͷ௨৴ʹ͸ద༻͞Εͳ͍ Nulab Inc., at NuCon mini 2021 Summer 14
15. ΍ͬͨ΄͏͕Α͍͜ͱ • URLSessionͱ͔NWConnection࢖ͬͯͨ΄͏͕iCloud Private Relay ͷHTTPτϥϑΟοΫͷσόοάͱ͔͠΍͍͔͢Β৐Γ׵͑ਪ঑ • Ґஔ৘ใ͸Core Location APIͳͲΛ࢖ͬͯ໌ࣔతʹऔಘ͢Δ • ηΩϡΞͰͳ͍௨৴͸iCloud Private Relay͕ࣗಈతʹηΩϡΞʹ͠ ͯ͘ΕΔ • ͚ͲΤϯυπʔΤϯυͰηΩϡΞͳͷ͕ϕετ͔ͩΒHTTP΍Ί ͯ΄͍͠ Nulab Inc., at NuCon mini 2021 Summer 15
16. iCloud Private Relay΁ ͷΞΫηεͷϒϩοΫ͕ ඞཁͳέʔε Nulab Inc., at NuCon mini 2021 Summer 16
17. ΍Δ΂͖͜ͱ • ඞཁʹԠͯ͡iCloud Private Relay΁ͷΞΫηεͷϒϩοΫΛݕ౼͢Δ • اۀ΍ֶߍͷαʔόʔͳͲͰωοτϫʔΫͷ؂ࢹͳͲ͕ඞཁͳ৔߹ • ΞΫηεઌͷ΢ΣϒαΠτͷ؂ࢹ͕Ͱ͖ͳ͍ • ར༻͍ͯ͠ΔWebαʔϏεͰIPΞυϨεͰͷΞΫηε੍ݶΛ༗ޮʹ͍ͯ͠Δ • iCloud Private RelayͷIP͔Β͸ΞΫηεͰ͖ͳ͘ͳͬͯ͠·͏ɻ • ωοτϫʔΫ؅ཧऀͳͲ • ఏڙ͍ͯ͠ΔWebαʔϏεͰIPΞυϨεͰͷΞΫηε੍ݶΛఏڙ͍ͯ͠Δ • ར༻ऀʹࣄલʹ஌Β͓ͤͯ͘ɻ • SaaSαʔϏεఏڙऀͳͲ Nulab Inc., at NuCon mini 2021 Summer 17
18. ϒϩοΫ͢Δํ๏ • ҎԼͷϗετ໊ͷ໰͍߹Θͤ͸ωοτϫʔΫ಺ͷDNSϦκϧό ͰෆࡏԠ౴Λฦ͢ɻλΠϜΞ΢τͤͨ͞Γɺύέοτͷυϩο ϓͩͱԠ౴͕஗͘ͳΔͷͰ΍Ίͨ΄͏͕ྑ͍ɻ • mask.icloud.com • mask-h2.icloud.com • ͜ΕΛߦ͏ͱiOS͕ࣗಈతʹϢʔβʔʹϓϩϯϓτग़ͯ͠ɺ Ϣʔβʔ͕iCloud Private RelayΛར༻Λճආ͢Δ͔બ୒Ͱ͖Δ Nulab Inc., at NuCon mini 2021 Summer 18
19. EϝʔϧτϥοΩϯά Nulab Inc., at NuCon mini 2021 Summer 19
20. ΍ͬͨ΄͏͕Α͍͜ͱ • ஍Ҭಛఆʹҧ͍͕ͰΔ͔΋͠Εͳ͍ͷͰݕ౼͢Δ • ஍Ҭ͝ͱʹϓʔϧ͍ͯ͠ΔIP͸ݶΒΕ͍ͯΔ͔ΒɺΤϦΞ͸޿͕Δ͸ ͣ • Hide My EmailΛར༻͍ͯ͠ΔΞΧ΢ϯτͷ৔߹͸ɺEϝʔϧͷ։෧ঢ়گ ΍։෧͕࣌ؒ౰ͯʹͳΒͳ͍͜ͱΛ஌͓ͬͯ͘ɻ • ྆ํͱ΋ݱ࣌఺Ͱ͸ར༻ऀ਺తʹޡࠩͷൣғͩͱࢥ͏͕ɺࠓޙͷΠϯ λʔωοτ͸͜ͷลΓͷτϥοΩϯάख๏͕࢖͑ͳ͍ํ޲ʹਐΜͰ͍Δ ͱࢥΘΕΔɻ Nulab Inc., at NuCon mini 2021 Summer 20
21. ࢀߟ • Prepare Your Network for iCloud Private Relay • Get ready for iCloud Private Relay • Apple’s privacy pillars in focus ਖ਼ࣜϦϦʔε࣌ʹ͸มߋɾఫճ͞Ε͍ͯΔՄೳੑ΋͋ΔͷͰ͝ ྃঝ͍ͩ͘͞ɻ Nulab Inc., at NuCon mini 2021 Summer 21
22. ͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ Nulab Inc., at NuCon mini 2021 Summer 22