News for hackers. Stuff that matters.

A comment on iMessage Preview Problems; leak your location by receiving a text message. Parent comment

Re:iMessage Preview Problems; leak your location by receivin... by mhowland on Monday October 10, 2016 @11:51AM (#12677791)
No need to do in transit. I mean iMessage could simply proxy all http/https requests post decryption in iMessage, pre-request.

At the end of the day this privacy trade off (apple gets your browsing info) is probably more secure than an embedded webview that could potentially be exploited and is auto-loaded. Similar to how Chrome alerts of malicious sites...I see this as a long term larger attack vector than privacy leakage.

[ Parent | on HN ]
Re:iMessage Preview Problems; leak your location by receivin... by pfg on Monday October 10, 2016 @11:57AM (#12677848)
The URL being disclosed to Apple was what I was getting at, which would happen with any approach that involves Apple performing the request on behalf of the user. I don't think the trade-off you're describing is necessary given that the sender could prepare the preview.
[ Parent | on HN ]