News for hackers. Stuff that matters.
Re:FaceTime bug lets you hear audio of person you are callin... by Buge on Monday January 28, 2019 @11:58PM (#19023891)
How would E2E encryption stop a modified client? E2E protects against MITM. But we're not talking about MITM.
Re:FaceTime bug lets you hear audio of person you are callin... by jacobush on Tuesday January 29, 2019 @02:06AM (#19024397)
It could send the data but only on call accept give a session key
Re:FaceTime bug lets you hear audio of person you are callin... by lolc on Tuesday January 29, 2019 @06:36AM (#19025524)
That would still expose the pre-accept audio on accept.
Re:FaceTime bug lets you hear audio of person you are callin... by Buge on Tuesday January 29, 2019 @11:44PM (#19032748)
I wouldn't call it E2E encryption if only one party in the world has the key. E2E generally means both sides have the encryption key. But lolc points out the real problem with that scheme.