Why We Can No Longer Trust Microsoft

Re:Why We Can No Longer Trust Microsoft by mtgx on Monday July 15, 2013 @05:16AM (#6044478)

I wonder what would a Tim Cook-made iMessage look like from a security standpoint (probably a lot more like Skype/Hangouts than how it works right now).

[ Parent | on HN ]

Re:Why We Can No Longer Trust Microsoft by chmars on Monday July 15, 2013 @07:46AM (#6044946)

iMessage is in no way NSA-proof:

http://blog.cryptographyengineering.com/2013/06/can-apple-re...

tl;dr:

  * Apple distributes the encryption keys
  * Multiple keys can be associated with an account (iPhone, Mac – and the NSA?)
  * Apple can retain metadata
  * Apple doesn't use certificate pinning

[ Parent | on HN ]

Re:Why We Can No Longer Trust Microsoft by simonster on Monday July 15, 2013 @11:58AM (#6046366)

My understanding is that this isn't that bad. If you use iCloud, then the NSA can read your old messages. If you don't sync your iMessages with iCloud, under the assumption that not every iMessage gets encrypted to an NSA key in addition to the recipient's keys, your messages are safe until the NSA/other law enforcement explicitly targets you, and even then, they can only read new messages and not previous ones.

[ Parent | on HN ]

Re:Why We Can No Longer Trust Microsoft by fpgeek on Monday July 15, 2013 @06:15AM (#6044662)

I don't know, but I wouldn't be too impressed with the security of the existing iMessage: http://arstechnica.com/security/2013/06/can-apple-read-your-...

[ Parent | on HN ]