3 ms·
There are more threat vectors than man-in-the-middle attacks. Beeper Mini does not make the iMessage protocol any less safe. It's end-to-end encrypted. Great. N
by the_gastropod 3y ago
There are more threat vectors than man-in-the-middle attacks. Beeper Mini does not make the iMessage protocol any less safe. It's end-to-end encrypted. Great. No problem there.
The problem is: the client application itself is a big unknown. Beeper says it's secure, and it very well could be. But we have no idea. But if it receives, decrypts, then sends sensitive information, as diagnostics, back to a a central server unencrypted, for example, that's obviously a huge problem.
- skeaker 3y agoIn that case Beeper Mini themselves are the man in the middle... But that aside, yeah, that's a problem with all closed source E2EE services. If you are a journalist in a warring nation or are being tracked by state actors I would hope you are not using iMessage to stay safe to begin with.