News for hackers. Stuff that matters.

A comment on A Formal Analysis of Apple's iMessage PQ3 Protocol [pdf]. Parent comment

Re:A Formal Analysis of Apple's iMessage PQ3 Protocol [pdf] by eddyg on Friday May 09, 2025 @08:13AM (#43935911)
More people need to watch Ivan Krstic's Black Hat presentation to understand the efforts Apple goes to to ensure sensitive data (like User Escrow Keys stored in Apple's Cloud Key Vault) is protected... even from Apple.

https://www.youtube.com/watch?v=BLGFriOKz6U&t=26m50s

(Be sure to watch through the section from 34m to 36m...)

[ Parent | on HN ]
Re:A Formal Analysis of Apple's iMessage PQ3 Protocol [pdf] by dogleash on Friday May 09, 2025 @09:57AM (#43936825)
The problem isn't that the technical challenges aren't addressed. The problem is that no amount of tech can un-do a design that forces in a "just trust me bro" control relationship.

For some people it isn't a concern and that's fine, just so long as we acknowledge that it is a real and legitimate concern for other people, and that's also fine.

[ Parent | on HN ]
Re:A Formal Analysis of Apple's iMessage PQ3 Protocol [pdf] by rasz on Friday May 09, 2025 @04:21PM (#43940541)
> even from inside Apple

sure, reminder 'Apple pays millions to woman after explicit photos posted online'

'Technicians posted the private photos and video from her iPhone after she sent it to Apple for repair, according to legal documents'

https://www.telegraph.co.uk/business/2021/06/06/apple-pays-m...

[ Parent | on HN ]
Re:A Formal Analysis of Apple's iMessage PQ3 Protocol [pdf] by modeless on Friday May 09, 2025 @05:44PM (#43941189)
Rogue insider threats are far from the only thing e2ee protects against.
[ Parent | on HN ]