{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T13:17:29Z","timestamp":1782307049945,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":49,"publisher":"ACM","funder":[{"name":"German Federal Ministry of Education and Research and the Hessian State Ministry for Higher Education, Research, and the Arts within their joint support of the National Research Center for Applied Cybersecurity ATHENE","award":["-"],"award-info":[{"award-number":["-"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6,30]]},"DOI":"10.1145\/3765613.3811691","type":"proceedings-article","created":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T13:43:03Z","timestamp":1780407783000},"page":"63-73","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Unlocking Apple's Private Cloud Compute: An Analysis of Privacy-Preserving Artificial Intelligence"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-7072-337X","authenticated-orcid":false,"given":"Yannik","family":"Dittmar","sequence":"first","affiliation":[{"name":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-3603-0496","authenticated-orcid":false,"given":"Marvin Jerome","family":"Stephan","sequence":"additional","affiliation":[{"name":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-1051-1549","authenticated-orcid":false,"given":"Thomas","family":"V\u00f6lkl","sequence":"additional","affiliation":[{"name":"TU Darmstadt, Secure Mobile Networking Lab, Darmstadt, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9163-5989","authenticated-orcid":false,"given":"Matthias","family":"Hollick","sequence":"additional","affiliation":[{"name":"TU Darmstadt, Secure Mobile Networking Lab, Darmstadt, Germany and IMDEA Networks Institute, Madrid, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-4341-2808","authenticated-orcid":false,"given":"Jiska","family":"Classen","sequence":"additional","affiliation":[{"name":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,29]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Absurd trolley problems. an interactive web-based game exploring humorous and philosophical variations of the trolley problem. https:\/\/neal.fun\/absurd-trolley-problems\/","author":"Agarwal Neal","year":"2026","unstructured":"Neal Agarwal. Absurd trolley problems. an interactive web-based game exploring humorous and philosophical variations of the trolley problem. https:\/\/neal.fun\/absurd-trolley-problems\/, 2026."},{"key":"e_1_3_2_1_2_1","volume-title":"February","year":"2026","unstructured":"Antropic. Is my data used for model training? https:\/\/privacy.claude.com\/en\/articles\/10023580-is-my-data-used-for-model-training, February 2026."},{"key":"e_1_3_2_1_3_1","volume-title":"February","author":"Intelligence Apple","year":"2026","unstructured":"Apple. Apple Intelligence. https:\/\/www.apple.com\/apple-intelligence\/, February 2026."},{"key":"e_1_3_2_1_4_1","volume-title":"February","year":"2026","unstructured":"Apple. Attested Request Handling. https:\/\/security.apple.com\/documentation\/private-cloud-compute\/requesthandling, February 2026."},{"key":"e_1_3_2_1_5_1","volume-title":"February","author":"Attestation Cloud","year":"2026","unstructured":"Apple. Cloud Attestation. https:\/\/security.apple.com\/documentation\/private-cloud-compute\/softwarelayering#Cloud-Attestation, February 2026."},{"key":"e_1_3_2_1_6_1","volume-title":"February","year":"2026","unstructured":"Apple. Non-Targetability. https:\/\/security.apple.com\/documentation\/private-cloud-compute\/nontargetability, February 2026."},{"key":"e_1_3_2_1_7_1","volume-title":"February","year":"2026","unstructured":"Apple. Private Cloud Compute Security Guide. https:\/\/security.apple.com\/documentation\/private-cloud-compute, February 2026."},{"key":"e_1_3_2_1_8_1","volume-title":"March","year":"2026","unstructured":"Apple. Private Cloud Compute Source Code. https:\/\/github.com\/apple\/security-pcc, March 2026."},{"key":"e_1_3_2_1_9_1","volume-title":"February","year":"2026","unstructured":"Apple. Request Flow. https:\/\/security.apple.com\/documentation\/private-cloud-compute\/requestflow, February 2026."},{"key":"e_1_3_2_1_10_1","volume-title":"February","year":"2026","unstructured":"Apple. Token Granting Token Validator - OTT Salt. https:\/\/github.com\/apple\/security-pcc\/blob\/410883f7dfc76ab5e6f4f9c5d5543510b4ff7134\/CloudBoard\/Sources\/CloudBoardJobHelperCore\/Auth\/TokenGrantingTokenValidator.swift#L166-L176, February 2026."},{"key":"e_1_3_2_1_11_1","volume-title":"February","year":"2026","unstructured":"Apple. Token Granting Token Validator - TGT Verification. https:\/\/github.com\/apple\/security-pcc\/blob\/410883f7dfc76ab5e6f4f9c5d5543510b4ff7134\/CloudBoard\/Sources\/CloudBoardJobHelperCore\/Auth\/TokenGrantingTokenValidator.swift#L89-L111, February 2026."},{"key":"e_1_3_2_1_12_1","volume-title":"February","year":"2026","unstructured":"Apple. Virtual Research Environment. https:\/\/security.apple.com\/documentation\/private-cloud-compute\/virtualresearchenvironment, February 2026."},{"key":"e_1_3_2_1_13_1","volume-title":"Mmlu-pro leaderboard","author":"Benchmarks Open","year":"2025","unstructured":"Open Benchmarks and Kaggle. Mmlu-pro leaderboard, 2025."},{"key":"e_1_3_2_1_14_1","volume-title":"Language models are few-shot learners. Advances in neural information processing systems, 33:1877-1901","author":"Brown Tom","year":"2020","unstructured":"Tom Brown, Benjamin Mann, Nick Ryder, Melanie Subbiah, Jared D Kaplan, Prafulla Dhariwal, Arvind Neelakantan, Pranav Shyam, Girish Sastry, Amanda Askell, et al. Language models are few-shot learners. Advances in neural information processing systems, 33:1877-1901, 2020."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","unstructured":"S. Celi A. Davidson S. Valdez and C. A. Wood. Privacy Pass Issuance Protocols. Technical Report RFC9578 2024.","DOI":"10.17487\/RFC9578"},{"key":"e_1_3_2_1_16_1","volume-title":"NDSS","author":"Classen Jiska","year":"2025","unstructured":"Jiska Classen, Alexander Heinrich, Fabian Portner, Felix Rohrbach, and Matthias Hollick. Starshields for iOS: Navigating the Security Cosmos in Satellite Communication. In NDSS, 2025."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","unstructured":"Frank Denis Frederic Jacobs and Christopher A. Wood. RSA Blind Signatures. Technical Report RFC9497 2023.","DOI":"10.17487\/RFC9474"},{"key":"e_1_3_2_1_18_1","unstructured":"Brian Duignan. Trolley Problem. Encyclop\u00e6dia Britannica 2026."},{"key":"e_1_3_2_1_19_1","unstructured":"Ethan Li et al. Apple Intelligence Foundation Language Models: Tech Report 2025. https:\/\/arxiv.org\/abs\/2507.13575 2025."},{"key":"e_1_3_2_1_20_1","volume-title":"February","year":"2026","unstructured":"GhidraApple. gxpc. https:\/\/github.com\/ReverseApple\/gxpc, February 2026."},{"key":"e_1_3_2_1_21_1","volume-title":"February","year":"2026","unstructured":"Google. Ask more of your phone with Google Pixel 10. https:\/\/store.google.com\/us\/magazine\/google-pixel-phones, February 2026."},{"key":"e_1_3_2_1_22_1","volume-title":"February","year":"2026","unstructured":"Google. Gemini Apps Privacy Hub - How long we retain your data. https:\/\/support.google.com\/gemini\/answer\/13594961, February 2026."},{"key":"e_1_3_2_1_23_1","volume-title":"January","year":"2026","unstructured":"Google. Joint statement from Google and Apple. https:\/\/blog.google\/company-news\/inside-google\/company-announcements\/joint-statement-google-apple\/, January 2026."},{"key":"e_1_3_2_1_24_1","volume-title":"Moral Foundations Test. The website provides information and resources related to Moral Foundations Theory, first proposed by Haidt and Joseph","author":"Haidt Jonathan","year":"2004","unstructured":"Jonathan Haidt, Jesse Graham, and Collaborators. Moral Foundations Test. The website provides information and resources related to Moral Foundations Theory, first proposed by Haidt and Joseph in 2004. https:\/\/moralfoundations.github.io, 2012."},{"key":"e_1_3_2_1_25_1","volume-title":"Measuring Massive Multitask Language Understanding","author":"Hendrycks Dan","year":"2021","unstructured":"Dan Hendrycks, Collin Burns, Steven Basart, Andy Zou, Mantas Mazeika, Dawn Song, and Jacob Steinhardt. Measuring Massive Multitask Language Understanding, 2021."},{"key":"e_1_3_2_1_26_1","volume-title":"https:\/\/huggingface.co\/spaces\/TIGER-Lab\/MMLU-Pro","author":"Leaderboard Pro","year":"2026","unstructured":"Huggingface. MMLU-Pro Leaderboard. https:\/\/huggingface.co\/spaces\/TIGER-Lab\/MMLU-Pro, 2026."},{"key":"e_1_3_2_1_27_1","volume-title":"https:\/\/www.kaggle.com\/benchmarks\/open-benchmarks\/mmlu","author":"Leaderboard MMLU","year":"2025","unstructured":"Kaggle. MMLU Leaderboard. https:\/\/www.kaggle.com\/benchmarks\/open-benchmarks\/mmlu, 2025."},{"key":"e_1_3_2_1_28_1","first-page":"351","volume-title":"Proceedings of the Twenty-Sixth International Symposium on Theory, Algorithmic Foundations, and Protocol Design for Mobile Networks and Mobile Computing, MobiHoc '25","author":"Kiesel Heiko","year":"2025","unstructured":"Heiko Kiesel and Jiska Classen. Privacy promises unmasked: A comprehensive study of privacy proxies for the masses. In Proceedings of the Twenty-Sixth International Symposium on Theory, Algorithmic Foundations, and Protocol Design for Mobile Networks and Mobile Computing, MobiHoc '25, pages 351-360, New York, NY, USA, 2025. Association for Computing Machinery."},{"key":"e_1_3_2_1_29_1","unstructured":"Jonathan Levin. *OS Internals Volume III Security and Insecurity. Technologeeks.com 2019."},{"key":"e_1_3_2_1_30_1","unstructured":"Jonathan Levin. *OS Internals Volume I User Space. Technologeeks.com 2020."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-92611-2_5"},{"key":"e_1_3_2_1_32_1","volume-title":"Le kit de piratage des serveurs d'Apple. https:\/\/matteyeux.com\/posts\/2024-11-01-pcc-2\/","year":"2024","unstructured":"Mathieu. Le kit de piratage des serveurs d'Apple. https:\/\/matteyeux.com\/posts\/2024-11-01-pcc-2\/, 2024."},{"key":"e_1_3_2_1_33_1","unstructured":"NERIS Analytics Limited. 16Personalities: Free personality test type descriptions relationship and career advice. A commercial website offering a personality questionnaire loosely based on the Myers-Briggs Type Indicator and Big Five personality traits. https:\/\/www.16personalities.com 2024."},{"key":"e_1_3_2_1_34_1","volume-title":"February","author":"AI.","year":"2026","unstructured":"OpenAI. How your data is used to improve model performance. https:\/\/openai.com\/policies\/how-your-data-is-used-to-improve-model-performance, February 2026."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"crossref","unstructured":"Tommy Pauly Steven Valdez and Christopher A. Wood. The Privacy Pass HTTP Authentication Scheme. Technical Report RFC9577 2024.","DOI":"10.17487\/RFC9577"},{"key":"e_1_3_2_1_36_1","first-page":"1257","article-title":"Proxy discrimination in the age of artificial intelligence and big data","volume":"105","author":"Prince Anya ER","year":"2019","unstructured":"Anya ER Prince and Daniel Schwarcz. Proxy discrimination in the age of artificial intelligence and big data. Iowa L. Rev., 105:1257, 2019.","journal-title":"Iowa L. Rev."},{"key":"e_1_3_2_1_37_1","volume-title":"February","author":"Ravn\u00e5s Ole Andr\u00e9 V.","year":"2026","unstructured":"Ole Andr\u00e9 V. Ravn\u00e5s. Frida. frida.re, February 2026."},{"key":"e_1_3_2_1_38_1","volume-title":"Proceedings on Privacy Enhancing Technologies","author":"Rollshausen Nils","year":"2025","unstructured":"Nils Rollshausen, Alexander Heinrich, Matthias Hollick, and Jiska Classen. WatchWitch: Interoperability, Privacy, and Autonomy for the Apple Watch. Proceedings on Privacy Enhancing Technologies, 2025."},{"key":"e_1_3_2_1_39_1","volume-title":"February","author":"Galaxy","year":"2026","unstructured":"Samsung. Galaxy AI. https:\/\/www.samsung.com\/us\/galaxy-ai\/, February 2026."},{"key":"e_1_3_2_1_40_1","volume-title":"Are Emergent Abilities of Large Language Models a Mirage? Advances in neural information processing systems, 36:55565-55581","author":"Schaeffer Rylan","year":"2023","unstructured":"Rylan Schaeffer, Brando Miranda, and Sanmi Koyejo. Are Emergent Abilities of Large Language Models a Mirage? Advances in neural information processing systems, 36:55565-55581, 2023."},{"key":"e_1_3_2_1_41_1","volume-title":"December","author":"Stute Milan","year":"2020","unstructured":"Milan Stute. airdrop-keychain-extractor. https:\/\/github.com\/seemoo-lab\/airdrop-keychain-extractor, December 2020."},{"key":"e_1_3_2_1_42_1","first-page":"37","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Stute Milan","year":"2019","unstructured":"Milan Stute, Sashank Narain, Alex Mariotto, Alexander Heinrich, David Kreitschmann, Guevara Noubir, and Matthias Hollick. A billion open interfaces for eve and mallory: MitM, DoS, and tracking attacks on iOS and macOS through apple wireless direct link. In 28th USENIX Security Symposium (USENIX Security 19), pages 37-54, Santa Clara, CA, August 2019. USENIX Association."},{"key":"e_1_3_2_1_43_1","volume-title":"Apple Intelligence Foundation Language Models. https:\/\/arxiv.org\/abs\/2407.21075","author":"Tom Gunter","year":"2024","unstructured":"Tom Gunter et al. Apple Intelligence Foundation Language Models. https:\/\/arxiv.org\/abs\/2407.21075, 2024."},{"key":"e_1_3_2_1_44_1","first-page":"95266","article-title":"MMLU-Pro: A more robust and challenging multi-task language understanding benchmark","volume":"37","author":"Wang Yubo","year":"2024","unstructured":"Yubo Wang, Xueguang Ma, Ge Zhang, Yuansheng Ni, Abhranil Chandra, Shiguang Guo, Weiming Ren, Aaran Arulraj, Xuan He, Ziyan Jiang, et al. MMLU-Pro: A more robust and challenging multi-task language understanding benchmark. Advances in Neural Information Processing Systems, 37:95266-95290, 2024.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"crossref","unstructured":"Jason Wei Xuezhi Wang Dale Schuurmans Maarten Bosma Fei Xia Ed Chi Quoc V Le Denny Zhou et al. Chain-of-thought prompting elicits reasoning in large language models. Advances in neural information processing systems 35:24824-24837 2022.","DOI":"10.52202\/068431-1800"},{"key":"e_1_3_2_1_46_1","volume-title":"Building virtual iPhone using VPHONE600AP component of recently released PCC firmware. https:\/\/github.com\/wh1te4ever\/super-tart-vphone-writeup","year":"2026","unstructured":"wh1te4ever. Building virtual iPhone using VPHONE600AP component of recently released PCC firmware. https:\/\/github.com\/wh1te4ever\/super-tart-vphone-writeup, 2026."},{"key":"e_1_3_2_1_47_1","volume-title":"On targeted manipulation and deception when optimizing llms for user feedback","author":"Williams Marcus","year":"2025","unstructured":"Marcus Williams, Micah Carroll, Adhyyan Narang, Constantin Weisser, Brendan Murphy, and Anca Dragan. On targeted manipulation and deception when optimizing llms for user feedback, 2025."},{"key":"e_1_3_2_1_48_1","volume-title":"February","author":"Xiaomi","year":"2026","unstructured":"Xiaomi. Xiaomi HyperAI. https:\/\/www.mi.com\/global\/brand\/ai\/xiaomi-hyperai\/, February 2026."},{"key":"e_1_3_2_1_49_1","volume-title":"OpenAI's GPT Is a Recruiter's Dream Tool. Tests Show There's Racial Bias. https:\/\/www.bloomberg.com\/graphics\/2024-openai-gpt-hiring-racial-discrimination\/","author":"Yin Leon","year":"2024","unstructured":"Leon Yin, Davey Alba, and Leonardo Nicoletti. OpenAI's GPT Is a Recruiter's Dream Tool. Tests Show There's Racial Bias. https:\/\/www.bloomberg.com\/graphics\/2024-openai-gpt-hiring-racial-discrimination\/, 2024."}],"event":{"name":"WiSec '26: 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks","location":"Saarbr\u00fccken Germany","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks"],"original-title":[],"deposited":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T13:44:49Z","timestamp":1780407889000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3765613.3811691"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,29]]},"references-count":49,"alternative-id":["10.1145\/3765613.3811691","10.1145\/3765613"],"URL":"https:\/\/doi.org\/10.1145\/3765613.3811691","relation":{},"subject":[],"published":{"date-parts":[[2026,6,29]]},"assertion":[{"value":"2026-06-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}