News for hackers. Stuff that matters.
Re:Android 10 by dkonofalski on Thursday September 05, 2019 @01:51PM (#20889167)
>it's true for iMessage as well

Are you sure about that? I was under the impression that, according to the security white paper released by Apple, that the key is generated on-device in the Secure Enclave and that Apple never has access to it. The Enclave itself also doesn't have network access so there's no way for that to be transmitted anywhere by any other means except for physical access, which is also limited in the hardware.

Re:Android 10 by viraptor on Sunday September 08, 2019 @04:34PM (#20913243)
You still have to trust the app to use the secure enclave and not generate the key in standard code.
Re:Android 10 by dkonofalski on Monday September 09, 2019 @11:44AM (#20919208)
iMessage does that, though. This has been verified by the jailbreak community and the netsec community.