News for hackers. Stuff that matters.

A comment on Building end-to-end security for Messenger – Engineering at Meta. Parent comment

Re:Building end-to-end security for Messenger – Engineering ... by candiddevmike on Thursday December 07, 2023 @08:23AM (#38556002)
Pretty simple actually, it either decrypts successfully or it's not implemented correctly. Same way push notifications work.
[ Parent | on HN ]
Re:Building end-to-end security for Messenger – Engineering ... by Thorrez on Thursday December 07, 2023 @08:47AM (#38556191)
FWIU, this[1] was decrypting imessages successfully. But was also storing all your imessages in a serverside database accessible to the server (instead of being e2e encrypted like imessage is supposed to be) and leaking the authentication token to access the imessages over unencrypted HTTP.

https://arstechnica.com/gadgets/2023/11/nothings-imessage-ap...

[ Parent | on HN ]