3 ms·

The better analogy is using a fake ID to get the locksmith to give you a copy of the house key. The house is Apple’s servers The fake ID is spoofed device seri

The better analogy is using a fake ID to get the locksmith to give you a copy of the house key. The house is Apple’s servers The fake ID is spoofed device serials and UUIDs The copy of the house key is the authentication blob Nobody would blink twice if a prosecutor threw the book at someone like that. Still, somehow, I’m sure many here would complain if the DOJ would prosecute Beeper for violating the CFAA by committing computer trespass or if Apple would sue them for violating the clause prohibiting reverse engineering in the OS license.

nvy 3y ago
Pretty sure they're buying actual Mac minis and using those device IDs. If you have evidence to the contrary I would be very interested in seeing it.
- turquoisevar 3y ago
  Pretty sure you’re mixing up Beeper Cloud with Beeper Mini. Beeper Mini is based on pypush, which they’ve bought, and is clearly using spoofed data in the data.plist[0]. I’ve searched, but I’ve found no mention of them purchasing Mac Minis en masse to support the $2/mo Beeper Mini customer’s texting habits. Besides, it wouldn’t make sense anyway because they used to tout you didn’t need an Apple ID and instead could use your phone number, and non-iPhone IDs don’t allow for iMessage activation on phone numbers, only email addresses. 0: https://github.com/JJTech0130/pypush/blob/main/emulated/data.plist https://github.com/JJTech0130/pypush/blob/main/emulated/data...
  - nvy 3y ago
    Oh maybe I'm mixing up their products. They've gone full Microsoft with the naming. Next release will be called Cloud.BEEP Core
- sgerenser 3y ago
  I didn’t see anywhere that they’re buying any real hardware for this product for purpose of gaining legitimate device IDs. Source?
noahtallen 3y ago
The analogy is off in a meaningful way: you're using a "fake ID" to get the locksmith to give you a copy of your own house key because the locksmith won't accept your real ID. No prosecutor is going to throw the book at someone trying to access their own house. Apple claims I'm in control of my messages. They're on my devices. Apple refuses access to Android. Why can't I use technology to make my messages work on Android? They're my messages! You might respond that this impacts someone else. For example, me using Beeper means that anyone messaging me is impacted. My counterpoint is that the user is always the weakest link. I can share messages sent to me with anyone I like, and that's legally fine to do. So why can't they be shared with a different software service that I trust? (People use all kinds of 3rd party email clients which could be untrustworthy, and yet we still mostly trust email.)
- turquoisevar 3y ago
  We’re talking about accessing Apple’s servers, how would that be your own house?

nvy 3y ago

Pretty sure they're buying actual Mac minis and using those device IDs. If you have evidence to the contrary I would be very interested in seeing it.

turquoisevar 3y ago
Pretty sure you’re mixing up Beeper Cloud with Beeper Mini. Beeper Mini is based on pypush, which they’ve bought, and is clearly using spoofed data in the data.plist[0]. I’ve searched, but I’ve found no mention of them purchasing Mac Minis en masse to support the $2/mo Beeper Mini customer’s texting habits. Besides, it wouldn’t make sense anyway because they used to tout you didn’t need an Apple ID and instead could use your phone number, and non-iPhone IDs don’t allow for iMessage activation on phone numbers, only email addresses. 0: https://github.com/JJTech0130/pypush/blob/main/emulated/data.plist https://github.com/JJTech0130/pypush/blob/main/emulated/data...
- nvy 3y ago
  Oh maybe I'm mixing up their products. They've gone full Microsoft with the naming. Next release will be called Cloud.BEEP Core
sgerenser 3y ago
I didn’t see anywhere that they’re buying any real hardware for this product for purpose of gaining legitimate device IDs. Source?

noahtallen 3y ago

The analogy is off in a meaningful way: you're using a "fake ID" to get the locksmith to give you a copy of your own house key because the locksmith won't accept your real ID. No prosecutor is going to throw the book at someone trying to access their own house. Apple claims I'm in control of my messages. They're on my devices. Apple refuses access to Android. Why can't I use technology to make my messages work on Android? They're my messages! You might respond that this impacts someone else. For example, me using Beeper means that anyone messaging me is impacted. My counterpoint is that the user is always the weakest link. I can share messages sent to me with anyone I like, and that's legally fine to do. So why can't they be shared with a different software service that I trust? (People use all kinds of 3rd party email clients which could be untrustworthy, and yet we still mostly trust email.)

turquoisevar 3y ago
We’re talking about accessing Apple’s servers, how would that be your own house?