3 ms·
True, but at the same time, it’s a very small attack vector. I’d say the vast majority of users could really care less that an iMessage is decrypted for a brief
by noahtallen 3y ago
True, but at the same time, it’s a very small attack vector. I’d say the vast majority of users could really care less that an iMessage is decrypted for a brief period in-memory on some Mac VM in a data center.
You place your trust in 3rd party cloud servers for so many things. Email, as an example, is far more confidential / important, but most people never have it encrypted.
It’s still a fair criticism, but I still see Beeper + iMessage as more privacy-friendly than like FB Messenger (which has way more users).
- mschuster91 3y ago> I’d say the vast majority of users could really care less that an iMessage is decrypted for a brief period in-memory on some Mac VM in a data center. And yet, that's precisely where I would go if I were law enforcement or a secret service. Tell them they're being used by terrorists/drug kingpins/CSAM peddlers, slap a gag order on 'em, and scoop up everything. And unlike Apple, Whatsapp or Telegram whoever hosts such a service can't even refuse such an order on grounds of technical impossibility because the messages are in plaintext in memory.
- modeless 3y agoLaw enforcement doesn't need to do that. They can go direct to Apple because Apple's iCloud backup breaks iMessage end-to-end encryption for almost all people anyway (few enable the advanced protection program that fixes this blatant hole and both sides need it enabled to preserve the encryption). This isn't a conspiracy theory, it's documented behavior from Apple. People don't know or care. Use Signal if you want end-to-end encryption and don't feel bad about using Beeper for people stuck on iMessage.