News for hackers. Stuff that matters.
Re:Apple cuts off Beeper Mini's access by modeless on Saturday December 09, 2023 @02:39AM (#38579604)
iPhones with iCloud backup enabled without ADP are almost certainly the majority. I believe this is essentially the default configuration. Even if you disable backups or enable ADP Apple almost certainly still has most of your messages from the other end of the conversation. It is false advertising to claim your service is E2EE without any disclaimer when in reality you collect the keys to the majority of messages and decrypt them at the request of law enforcement.
Re:Apple cuts off Beeper Mini's access by aryaneja on Saturday December 09, 2023 @04:04AM (#38580065)
I have addressed your concern in my comment

> They need to offer this as for most users, the risk of losing their whole digital lives because they forgot their passwords outweights E2EE.

There is no clear trade-off that is an option.

Re:Apple cuts off Beeper Mini's access by modeless on Saturday December 09, 2023 @11:49AM (#38583385)
"I can't imagine a way for this feature we advertised to actually work" is not an excuse for false advertising! But there is a way to do better. Google's Android backup is E2EE by default. It does not require remembering a long password. All it requires is your phone unlock code, which you normally enter at least once per day and are extremely unlikely to forget. This is actually how Apple's works too, when ADP is enabled. Either it should be enabled by default or Apple should stop claiming iMessage is E2EE.