iCloud Private Relayに立ち向かう / Confronting iCloud Private Relay

by 株式会社ヌーラボ

Slide 1

Slide 1 text

iCloud Private Relayʹ ཱͪ޲͔͏ Nulab Inc., at NuCon mini 2021 Summer 1

Slide 2

Slide 2 text

ࣗݾ঺հ • ٢ా ଠҰ࿠ / Taichiro Yoshida / @dataich • TypetalkνʔϜΤϯδχΞ • iOSΞϓϦ - Swift • όοΫΤϯυ - Scala • ່2ਓ • ήʔϜʢ΢ΠΠϨɺΦʔϓϯϫʔϧυARPGʣ • ࠷ۙ͸Ωϟϯϓ Nulab Inc., at NuCon mini 2021 Summer 2

Slide 3

Slide 3 text

iCloud Private Relayͱ͸ • Ϣʔβʔͷߦಈ؂ࢹΛ๷͙AppleͷαʔϏε • iCloud+ αϒεΫϦϓγϣϯܖ໿ऀʹఏڙ • σϑΥϧτͰ༗ޮΒ͍͠ʢެࣜιʔε͕ݟ͔ͭΒͳ͍ʣ • iOS 15 / macOS Monterey Nulab Inc., at NuCon mini 2021 Summer 3

Slide 4

Slide 4 text

Ͳ͏ಈ͘ʁ Nulab Inc., at NuCon mini 2021 Summer 4

Slide 5

Slide 5 text

iCloud Private Relay͕ແޮͳ৔߹ Nulab Inc., at NuCon mini 2021 Summer 5

Slide 6

Slide 6 text

• IPΞυϨεͱΞΫηεઌ΢ΣϒαΠτʹ͍ͭͯΈΜͳ஌͍ͬͯΔ • ΫϥΠΞϯτ • ϓϩόΠμ • αʔόʔ • ໌ࣔతͳڐՄΛಘͣʹҐஔ৘ใʢIPΞυϨεʣΛ஌Δ͜ͱ͕Ͱ͖Δ • CookieʹΑΔϑΟϯΨʔϓϦϯτ͸֤ϒϥ΢β͕ରࡦ͖ͯͨ͠ʢSafariͰ͸ Intelligent Tracking Preventionʣ • ͦΕͰ΋IPΞυϨεʹΑΔϑΟϯΨʔϓϦϯτ͸๷͍͛ͯͳ͍ • VPNΛར༻ͨ͠ͱͯ͠΋ɺͦͷࣄۀऀʹ͸৘ใʢIPΞυϨεɺΞΫηεઌ΢Σϒα Πτʣ͕࢒Δ Nulab Inc., at NuCon mini 2021 Summer 6

Slide 7

Slide 7 text

iCloud Private Relay͕༗ޮͳ৔߹ Nulab Inc., at NuCon mini 2021 Summer 7

Slide 8

Slide 8 text

• ΫϥΠΞϯτ͸AppleͷIngress ProxyʹϦΫΤετ͢Δ • IPΞυϨε͸ϓϩόΠμͱ1ͭΊͷϓϩΩγʢIngressʣ͕஌Δ͜ͱʹͳΔɻυϝ Πϯ͸҉߸Խ͞Εͨঢ়ଶͰอ࣋͢ΔͷͰΘ͔Βͳ͍ɻ • 2ͭΊͷϓϩΩγʢEgressʣ͸IngressͷIPΞυϨεͱ҉߸Խ͞ΕͨυϝΠϯΛ ΋Β͏ɻΫϥΠΞϯτͷIPΞυϨε͸෼͔Βͳ͍ɻυϝΠϯΛ෮߸͠iCloud Private Relay͕஍Ҭ͝ͱʹϓʔϧ͍ͯ͠ΔIPΛ࢖͍ɺWebͷϦΫΤετΛॲཧɻ • ΢ΣϒαΠτ͸Egress͕બΜͩIP͔͠෼͔Βͳ͍ɻ • ͜ͷϑϩʔͷதʹIPΞυϨεͱΞΫηεઌ΢ΣϒαΠτͷ྆ํΛಉ࣌ʹ஌ͬͯ ͍Δࣄۀऀ͸͍ͳ͍ঢ়ଶʢAppleͰ͑͞஌Βͳ͍ʣ • IPΞυϨεʹΑΔϑΟϯΨʔϓϦϯτ͕ഉআ͞ΕΔɻ Nulab Inc., at NuCon mini 2021 Summer 8

Slide 9

Slide 9 text

Webαʔόʔͷ४උ Nulab Inc., at NuCon mini 2021 Summer 9

Slide 10

Slide 10 text

΍Δ΂͖͜ͱ Nulab Inc., at NuCon mini 2021 Summer 10

Slide 11

Slide 11 text

Geolocation DBΛߋ৽͢Δ • IPΞυϨεϕʔεͰͷ஍Ҭ৘ใͷऔಘ͸͜Ε·Ͱ௨Γಈ࡞͢ Δɻ • ͦΕΛਖ਼͘͠ಈ࡞ͤ͞ΔͨΊiCloud Private Relay͕࣋ͭIPΞ υϨεͷGeolocationΛ൓өͤ͞Δ Nulab Inc., at NuCon mini 2021 Summer 11

Slide 12

Slide 12 text

΍ͬͨ΄͏͕Α͍͜ͱ • IPΞυϨεϕʔεͰͷೝূ΍Ґஔ৘ใऔಘ͸΍ΊΑ͏ • Ґஔ৘ใ͸Geolocation APIͰ໌ࣔతʹ΋Β͏ɻ • QUIC΍HTTP/3ʹରԠ͢Δ • ඞਢͰ͸ͳ͍͚ͲɺηΩϡϦςΟ໘ɺύϑΥʔϚϯε໘ͰApple ͕ਪ঑͍ͯ͠Δɻ • IPΞυϨε͕ه࿥Ͱ͖ͳ͍͜ͱΛαʔϏεͱͯ͠ྑ͠ͱ͢Δ͔͸൑ அ͕ඞཁɻ Nulab Inc., at NuCon mini 2021 Summer 12

Slide 13

Slide 13 text

iOSΞϓϦͷ४උ Nulab Inc., at NuCon mini 2021 Summer 13

Slide 14

Slide 14 text

΍Δ΂͖͜ͱ • ͋·Γͳ͍ • Ϣʔβʔ͕iCloud+΁Ճೖ͠ɺiCloud Private Relay͕༗ޮʹ ͳ͍ͬͯΕ͹ࣗಈతʹద༻͞ΕΔ • ϩʔΧϧωοτϫʔΫɺϓϥΠϕʔτυϝΠϯɺVPNɾϓϩ Ωγઃఆͯͨ͠Γ͢ΔҰ෦ͷ௨৴ʹ͸ద༻͞Εͳ͍ Nulab Inc., at NuCon mini 2021 Summer 14

Slide 15

Slide 15 text

΍ͬͨ΄͏͕Α͍͜ͱ • URLSessionͱ͔NWConnection࢖ͬͯͨ΄͏͕iCloud Private Relay ͷHTTPτϥϑΟοΫͷσόοάͱ͔͠΍͍͔͢Β৐Γ׵͑ਪ঑ • Ґஔ৘ใ͸Core Location APIͳͲΛ࢖ͬͯ໌ࣔతʹऔಘ͢Δ • ηΩϡΞͰͳ͍௨৴͸iCloud Private Relay͕ࣗಈతʹηΩϡΞʹ͠ ͯ͘ΕΔ • ͚ͲΤϯυπʔΤϯυͰηΩϡΞͳͷ͕ϕετ͔ͩΒHTTP΍Ί ͯ΄͍͠ Nulab Inc., at NuCon mini 2021 Summer 15

Slide 16

Slide 16 text

iCloud Private Relay΁ ͷΞΫηεͷϒϩοΫ͕ ඞཁͳέʔε Nulab Inc., at NuCon mini 2021 Summer 16

Slide 17

Slide 17 text

΍Δ΂͖͜ͱ • ඞཁʹԠͯ͡iCloud Private Relay΁ͷΞΫηεͷϒϩοΫΛݕ౼͢Δ • اۀ΍ֶߍͷαʔόʔͳͲͰωοτϫʔΫͷ؂ࢹͳͲ͕ඞཁͳ৔߹ • ΞΫηεઌͷ΢ΣϒαΠτͷ؂ࢹ͕Ͱ͖ͳ͍ • ར༻͍ͯ͠ΔWebαʔϏεͰIPΞυϨεͰͷΞΫηε੍ݶΛ༗ޮʹ͍ͯ͠Δ • iCloud Private RelayͷIP͔Β͸ΞΫηεͰ͖ͳ͘ͳͬͯ͠·͏ɻ • ωοτϫʔΫ؅ཧऀͳͲ • ఏڙ͍ͯ͠ΔWebαʔϏεͰIPΞυϨεͰͷΞΫηε੍ݶΛఏڙ͍ͯ͠Δ • ར༻ऀʹࣄલʹ஌Β͓ͤͯ͘ɻ • SaaSαʔϏεఏڙऀͳͲ Nulab Inc., at NuCon mini 2021 Summer 17

Slide 18

Slide 18 text

ϒϩοΫ͢Δํ๏ • ҎԼͷϗετ໊ͷ໰͍߹Θͤ͸ωοτϫʔΫ಺ͷDNSϦκϧό ͰෆࡏԠ౴Λฦ͢ɻλΠϜΞ΢τͤͨ͞Γɺύέοτͷυϩο ϓͩͱԠ౴͕஗͘ͳΔͷͰ΍Ίͨ΄͏͕ྑ͍ɻ • mask.icloud.com • mask-h2.icloud.com • ͜ΕΛߦ͏ͱiOS͕ࣗಈతʹϢʔβʔʹϓϩϯϓτग़ͯ͠ɺ Ϣʔβʔ͕iCloud Private RelayΛར༻Λճආ͢Δ͔બ୒Ͱ͖Δ Nulab Inc., at NuCon mini 2021 Summer 18

Slide 19

Slide 19 text

EϝʔϧτϥοΩϯά Nulab Inc., at NuCon mini 2021 Summer 19

Slide 20

Slide 20 text

΍ͬͨ΄͏͕Α͍͜ͱ • ஍Ҭಛఆʹҧ͍͕ͰΔ͔΋͠Εͳ͍ͷͰݕ౼͢Δ • ஍Ҭ͝ͱʹϓʔϧ͍ͯ͠ΔIP͸ݶΒΕ͍ͯΔ͔ΒɺΤϦΞ͸޿͕Δ͸ ͣ • Hide My EmailΛར༻͍ͯ͠ΔΞΧ΢ϯτͷ৔߹͸ɺEϝʔϧͷ։෧ঢ়گ ΍։෧͕࣌ؒ౰ͯʹͳΒͳ͍͜ͱΛ஌͓ͬͯ͘ɻ • ྆ํͱ΋ݱ࣌఺Ͱ͸ར༻ऀ਺తʹޡࠩͷൣғͩͱࢥ͏͕ɺࠓޙͷΠϯ λʔωοτ͸͜ͷลΓͷτϥοΩϯάख๏͕࢖͑ͳ͍ํ޲ʹਐΜͰ͍Δ ͱࢥΘΕΔɻ Nulab Inc., at NuCon mini 2021 Summer 20

Slide 21

Slide 21 text

ࢀߟ • Prepare Your Network for iCloud Private Relay • Get ready for iCloud Private Relay • Apple’s privacy pillars in focus ਖ਼ࣜϦϦʔε࣌ʹ͸มߋɾఫճ͞Ε͍ͯΔՄೳੑ΋͋ΔͷͰ͝ ྃঝ͍ͩ͘͞ɻ Nulab Inc., at NuCon mini 2021 Summer 21

Slide 22

Slide 22 text

͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ Nulab Inc., at NuCon mini 2021 Summer 22