News for hackers. Stuff that matters.
Re:EU Digital Markets Act, aimed at Google, Apple, Amazon, a... by runako on Wednesday July 20, 2022 @01:55PM (#32169667)
This facile response ignores that Apple Messages is a system, not just an encryption algorithm. Of particular concern is key management: who manages the keys that allow the messages to be decrypted? Currently, it's Apple.

What this Act says is that Apple Messages must interop with any other messaging system. If you spin up a VM running an iMessage-compatible server on Hetzner, Apple Messages must interop with you and cannot privilege Messages (e.g. by continuing to use blue bubbles as a differentiator). That VM may be malicious (for ex: it may log who communicated with whom when), but the Act still requires that it be placed on an even footing with Messages.

Similarly, the Act essentially says that once implemented, anyone using a phone can unintentionally be sending all of their messages to Facebook Messenger, which by law must have seamless interop with Messages. Any group chat could be logged by Facebook by virtue of one person in the chat choosing Facebook Messenger as their default messaging app.

This requirement materially changes the security posture of a billion devices currently in use. You may believe the tradeoff is worthwhile, but it's still not a free tradeoff.

Re:EU Digital Markets Act, aimed at Google, Apple, Amazon, a... by ko27 on Wednesday July 20, 2022 @04:15PM (#32171620)
Some of the comments you posted on this thread are completely false, like EU forcing Apple to change bubble color or forcing them to handover encryption keys. Neither of that is even remotely true. If Apple doesn't want other companies to have encryption keys they can (and should) provide an E2E API. They can document their own protocol, or implement an existing open one, like Signal's.
Re:EU Digital Markets Act, aimed at Google, Apple, Amazon, a... by lstodd on Wednesday July 20, 2022 @04:02PM (#32171418)
That only means that the Apple Messages model is outdated and a replacement is hereby being required.

If Apple prefers lock-in over innovation, it's their problem, not the users'.

Re:EU Digital Markets Act, aimed at Google, Apple, Amazon, a... by d12bb on Thursday July 21, 2022 @06:28AM (#32177663)
Is Signal's too, then? They also stated interop is no good.
Re:EU Digital Markets Act, aimed at Google, Apple, Amazon, a... by lstodd on Thursday July 21, 2022 @04:46PM (#32184798)
Yep. If it's bad, make it better. Whining about cruel europeans isn't productive.