2 ms·
> I am under the impression iMessage is pretty secure Why's that? (I'm asking seriously, because I don't understand how people get this impression.) iMessage
by hannob 10y ago
> I am under the impression iMessage is pretty secure
Why's that? (I'm asking seriously, because I don't understand how people get this impression.)
iMessage has some very fundamental design flaws that led to this attack:
https://blog.cryptographyengineering.com/2016/03/21/attack-of-week-apple-imessage/ https://blog.cryptographyengineering.com/2016/03/21/attack-o...
The attack is not super-spectacular, but the more worrying thing is that the design is not sound. They use an ad-hoc crypto construction that fails to follow usual best practices. And they haven't really fixed it, they just put some duct tape over it to avoid the attack.
- sgt 10y agoYes, but all software may have bugs. The attack you referred to was fixed in 9.3, and going forward there are no known attacks as far as I know. I think it's safe to assume a lot of people out there are continuously trying to break the iMessage crypto. For attacks that are not disclosed to the public (e.g. intelligence agencies that would like to keep it secret), this can really apply to any of the other competitors including Signal.