Apple partly halts Beeper's iMessage app again, suggesting a long fight ahead

Re:Apple partly halts Beeper's iMessage app again, suggestin... by the_gastropod on Thursday December 14, 2023 @09:09PM (#38650325)

There are more threat vectors than man-in-the-middle attacks. Beeper Mini does not make the iMessage protocol any less safe. It's end-to-end encrypted. Great. No problem there.

The problem is: the client application itself is a big unknown. Beeper says it's secure, and it very well could be. But we have no idea. But if it receives, decrypts, then sends sensitive information, as diagnostics, back to a a central server unencrypted, for example, that's obviously a huge problem.

[ Parent | on HN ]

Re:Apple partly halts Beeper's iMessage app again, suggestin... by skeaker on Friday December 15, 2023 @12:05AM (#38651181)

In that case Beeper Mini themselves are the man in the middle... But that aside, yeah, that's a problem with all closed source E2EE services. If you are a journalist in a warring nation or are being tracked by state actors I would hope you are not using iMessage to stay safe to begin with.

[ Parent | on HN ]