iCloud Private Relayに立ち向かう / Confronting iCloud Private Relay

2021年7月15日(木)に開催されたNuCon mini 2021 Summerの発表資料です。

▼発表動画アーカイブ
https://www.youtube.com/watch?v=kboFQ1VIMFE&t=596s

Transcript

1. iCloud Private Relayʹ
   ཱͪ޲͔͏
   Nulab Inc., at NuCon mini 2021 Summer 1
   

   View Slide

2. ࣗݾ঺հ
   • ٢ా ଠҰ࿠ / Taichiro Yoshida / @dataich
   • TypetalkνʔϜΤϯδχΞ
   • iOSΞϓϦ - Swift
   • όοΫΤϯυ - Scala
   • ່2ਓ
   • ήʔϜʢ΢ΠΠϨɺΦʔϓϯϫʔϧυARPGʣ
   • ࠷ۙ͸Ωϟϯϓ
   Nulab Inc., at NuCon mini 2021 Summer 2
   

   View Slide

3. iCloud Private Relayͱ͸
   • Ϣʔβʔͷߦಈ؂ࢹΛ๷͙AppleͷαʔϏε
   • iCloud+ αϒεΫϦϓγϣϯܖ໿ऀʹఏڙ
   • σϑΥϧτͰ༗ޮΒ͍͠ʢެࣜιʔε͕ݟ͔ͭΒͳ͍ʣ
   • iOS 15 / macOS Monterey
   Nulab Inc., at NuCon mini 2021 Summer 3
   

   View Slide

4. Ͳ͏ಈ͘ʁ
   Nulab Inc., at NuCon mini 2021 Summer 4
   

   View Slide

5. iCloud Private Relay͕ແޮͳ৔߹
   Nulab Inc., at NuCon mini 2021 Summer 5
   

   View Slide

6. • IPΞυϨεͱΞΫηεઌ΢ΣϒαΠτʹ͍ͭͯΈΜͳ஌͍ͬͯΔ
   • ΫϥΠΞϯτ
   • ϓϩόΠμ
   • αʔόʔ
   • ໌ࣔతͳڐՄΛಘͣʹҐஔ৘ใʢIPΞυϨεʣΛ஌Δ͜ͱ͕Ͱ͖Δ
   • CookieʹΑΔϑΟϯΨʔϓϦϯτ͸֤ϒϥ΢β͕ରࡦ͖ͯͨ͠ʢSafariͰ͸
   Intelligent Tracking Preventionʣ
   • ͦΕͰ΋IPΞυϨεʹΑΔϑΟϯΨʔϓϦϯτ͸๷͍͛ͯͳ͍
   • VPNΛར༻ͨ͠ͱͯ͠΋ɺͦͷࣄۀऀʹ͸৘ใʢIPΞυϨεɺΞΫηεઌ΢Σϒα
   Πτʣ͕࢒Δ
   Nulab Inc., at NuCon mini 2021 Summer 6
   

   View Slide

7. iCloud Private Relay͕༗ޮͳ৔߹
   Nulab Inc., at NuCon mini 2021 Summer 7
   

   View Slide

8. • ΫϥΠΞϯτ͸AppleͷIngress ProxyʹϦΫΤετ͢Δ
   • IPΞυϨε͸ϓϩόΠμͱ1ͭΊͷϓϩΩγʢIngressʣ͕஌Δ͜ͱʹͳΔɻυϝ
   Πϯ͸҉߸Խ͞Εͨঢ়ଶͰอ࣋͢ΔͷͰΘ͔Βͳ͍ɻ
   • 2ͭΊͷϓϩΩγʢEgressʣ͸IngressͷIPΞυϨεͱ҉߸Խ͞ΕͨυϝΠϯΛ
   ΋Β͏ɻΫϥΠΞϯτͷIPΞυϨε͸෼͔Βͳ͍ɻυϝΠϯΛ෮߸͠iCloud
   Private Relay͕஍Ҭ͝ͱʹϓʔϧ͍ͯ͠ΔIPΛ࢖͍ɺWebͷϦΫΤετΛॲཧɻ
   • ΢ΣϒαΠτ͸Egress͕બΜͩIP͔͠෼͔Βͳ͍ɻ
   • ͜ͷϑϩʔͷதʹIPΞυϨεͱΞΫηεઌ΢ΣϒαΠτͷ྆ํΛಉ࣌ʹ஌ͬͯ
   ͍Δࣄۀऀ͸͍ͳ͍ঢ়ଶʢAppleͰ͑͞஌Βͳ͍ʣ
   • IPΞυϨεʹΑΔϑΟϯΨʔϓϦϯτ͕ഉআ͞ΕΔɻ
   Nulab Inc., at NuCon mini 2021 Summer 8
   

   View Slide

9. Webαʔόʔͷ४උ
   Nulab Inc., at NuCon mini 2021 Summer 9
   

   View Slide

10. ΍Δ΂͖͜ͱ
    Nulab Inc., at NuCon mini 2021 Summer 10
    

    View Slide

11. Geolocation DBΛߋ৽͢Δ
    • IPΞυϨεϕʔεͰͷ஍Ҭ৘ใͷऔಘ͸͜Ε·Ͱ௨Γಈ࡞͢
    Δɻ
    • ͦΕΛਖ਼͘͠ಈ࡞ͤ͞ΔͨΊiCloud Private Relay͕࣋ͭIPΞ
    υϨεͷGeolocationΛ൓өͤ͞Δ
    Nulab Inc., at NuCon mini 2021 Summer 11
    

    View Slide

12. ΍ͬͨ΄͏͕Α͍͜ͱ
    • IPΞυϨεϕʔεͰͷೝূ΍Ґஔ৘ใऔಘ͸΍ΊΑ͏
    • Ґஔ৘ใ͸Geolocation APIͰ໌ࣔతʹ΋Β͏ɻ
    • QUIC΍HTTP/3ʹରԠ͢Δ
    • ඞਢͰ͸ͳ͍͚ͲɺηΩϡϦςΟ໘ɺύϑΥʔϚϯε໘ͰApple
    ͕ਪ঑͍ͯ͠Δɻ
    • IPΞυϨε͕ه࿥Ͱ͖ͳ͍͜ͱΛαʔϏεͱͯ͠ྑ͠ͱ͢Δ͔͸൑
    அ͕ඞཁɻ
    Nulab Inc., at NuCon mini 2021 Summer 12
    

    View Slide

13. iOSΞϓϦͷ४උ
    Nulab Inc., at NuCon mini 2021 Summer 13
    

    View Slide

14. ΍Δ΂͖͜ͱ
    • ͋·Γͳ͍
    • Ϣʔβʔ͕iCloud+΁Ճೖ͠ɺiCloud Private Relay͕༗ޮʹ
    ͳ͍ͬͯΕ͹ࣗಈతʹద༻͞ΕΔ
    • ϩʔΧϧωοτϫʔΫɺϓϥΠϕʔτυϝΠϯɺVPNɾϓϩ
    Ωγઃఆͯͨ͠Γ͢ΔҰ෦ͷ௨৴ʹ͸ద༻͞Εͳ͍
    Nulab Inc., at NuCon mini 2021 Summer 14
    

    View Slide

15. ΍ͬͨ΄͏͕Α͍͜ͱ
    • URLSessionͱ͔NWConnection࢖ͬͯͨ΄͏͕iCloud Private Relay
    ͷHTTPτϥϑΟοΫͷσόοάͱ͔͠΍͍͔͢Β৐Γ׵͑ਪ঑
    • Ґஔ৘ใ͸Core Location APIͳͲΛ࢖ͬͯ໌ࣔతʹऔಘ͢Δ
    • ηΩϡΞͰͳ͍௨৴͸iCloud Private Relay͕ࣗಈతʹηΩϡΞʹ͠
    ͯ͘ΕΔ
    • ͚ͲΤϯυπʔΤϯυͰηΩϡΞͳͷ͕ϕετ͔ͩΒHTTP΍Ί
    ͯ΄͍͠
    Nulab Inc., at NuCon mini 2021 Summer 15
    

    View Slide

16. iCloud Private Relay΁
    ͷΞΫηεͷϒϩοΫ͕
    ඞཁͳέʔε
    Nulab Inc., at NuCon mini 2021 Summer 16
    

    View Slide

17. ΍Δ΂͖͜ͱ
    • ඞཁʹԠͯ͡iCloud Private Relay΁ͷΞΫηεͷϒϩοΫΛݕ౼͢Δ
    • اۀ΍ֶߍͷαʔόʔͳͲͰωοτϫʔΫͷ؂ࢹͳͲ͕ඞཁͳ৔߹
    • ΞΫηεઌͷ΢ΣϒαΠτͷ؂ࢹ͕Ͱ͖ͳ͍
    • ར༻͍ͯ͠ΔWebαʔϏεͰIPΞυϨεͰͷΞΫηε੍ݶΛ༗ޮʹ͍ͯ͠Δ
    • iCloud Private RelayͷIP͔Β͸ΞΫηεͰ͖ͳ͘ͳͬͯ͠·͏ɻ
    • ωοτϫʔΫ؅ཧऀͳͲ
    • ఏڙ͍ͯ͠ΔWebαʔϏεͰIPΞυϨεͰͷΞΫηε੍ݶΛఏڙ͍ͯ͠Δ
    • ར༻ऀʹࣄલʹ஌Β͓ͤͯ͘ɻ
    • SaaSαʔϏεఏڙऀͳͲ
    Nulab Inc., at NuCon mini 2021 Summer 17
    

    View Slide

18. ϒϩοΫ͢Δํ๏
    • ҎԼͷϗετ໊ͷ໰͍߹Θͤ͸ωοτϫʔΫ಺ͷDNSϦκϧό
    ͰෆࡏԠ౴Λฦ͢ɻλΠϜΞ΢τͤͨ͞Γɺύέοτͷυϩο
    ϓͩͱԠ౴͕஗͘ͳΔͷͰ΍Ίͨ΄͏͕ྑ͍ɻ
    • mask.icloud.com
    • mask-h2.icloud.com
    • ͜ΕΛߦ͏ͱiOS͕ࣗಈతʹϢʔβʔʹϓϩϯϓτग़ͯ͠ɺ
    Ϣʔβʔ͕iCloud Private RelayΛར༻Λճආ͢Δ͔બ୒Ͱ͖Δ
    Nulab Inc., at NuCon mini 2021 Summer 18
    

    View Slide

19. EϝʔϧτϥοΩϯά
    Nulab Inc., at NuCon mini 2021 Summer 19
    

    View Slide

20. ΍ͬͨ΄͏͕Α͍͜ͱ
    • ஍Ҭಛఆʹҧ͍͕ͰΔ͔΋͠Εͳ͍ͷͰݕ౼͢Δ
    • ஍Ҭ͝ͱʹϓʔϧ͍ͯ͠ΔIP͸ݶΒΕ͍ͯΔ͔ΒɺΤϦΞ͸޿͕Δ͸
    ͣ
    • Hide My EmailΛར༻͍ͯ͠ΔΞΧ΢ϯτͷ৔߹͸ɺEϝʔϧͷ։෧ঢ়گ
    ΍։෧͕࣌ؒ౰ͯʹͳΒͳ͍͜ͱΛ஌͓ͬͯ͘ɻ
    • ྆ํͱ΋ݱ࣌఺Ͱ͸ར༻ऀ਺తʹޡࠩͷൣғͩͱࢥ͏͕ɺࠓޙͷΠϯ
    λʔωοτ͸͜ͷลΓͷτϥοΩϯάख๏͕࢖͑ͳ͍ํ޲ʹਐΜͰ͍Δ
    ͱࢥΘΕΔɻ
    Nulab Inc., at NuCon mini 2021 Summer 20
    

    View Slide

21. ࢀߟ
    • Prepare Your Network for iCloud Private Relay
    • Get ready for iCloud Private Relay
    • Apple’s privacy pillars in focus
    ਖ਼ࣜϦϦʔε࣌ʹ͸มߋɾఫճ͞Ε͍ͯΔՄೳੑ΋͋ΔͷͰ͝
    ྃঝ͍ͩ͘͞ɻ
    Nulab Inc., at NuCon mini 2021 Summer 21
    

    View Slide

22. ͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ
    Nulab Inc., at NuCon mini 2021 Summer 22
    

    View Slide