Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
According to Groß, Apple's BlastDoor changes are "close to the best that could've been done given the need for backwards compatibility," and will make the iMessage platform significantly more secure.

Translation iOS 15 will break iMessage compatibility with iOS 12 and earlier. :rolleyes:
 
  • Disagree
Reactions: BeefCake 15
Snowden is stuck in exile and still no one seems to grasp what he revealed that got him in trouble: the government ( or a least the government where he was from) collects ALL your data, everybody’s data, period.

So yeah, your messages are already on a govt server, before they hit your iPhone or any phone.

I'm actually listening to the Snowden / Joe Rogan interview right now!
 
What sort of backwards compatibility does he mean? The recoeiving of messages from other devices, or something else?
I would say that if you were to design it upfront with these services for separation of concern, you could design the data format to put the parts in clearly separate segments. With the current data format that all the pre-existing iMessage clients use, they probably need to unpack it a bit before al the parts are separated.
 
  • Like
Reactions: KeithBN
I'm actually listening to the Snowden / Joe Rogan interview right now!
I like the John Oliver “Government Surveillance” episode where Snowden is interviewed. (“Last Week Tonight,” Season 2, Episode 8)

On another note, Re: end-2-end encryption ... The data is encrypted through the whole transfer, but that data also is (at a minimum) on the service provider’s servers (it’s just encrypted.) As an example, WhatsApp spells this out in their privacy policy, especially with respect to messages that have media attached to them (ie: photos or videos.)
 
Last edited:
  • Like
Reactions: Michael Scrip
I appreciate that Apple leads the way in device security. iMessage would be a smaller attack vector if they'd stop adding apps, stickers, and whatever other WeChat-like features to it, but I get why they're doing that.

Many have described third-party messaging apps as "OSs within OSs" because of how they're trying to make their own sub-platforms, complete with app ecosystems. Now Apple has literally implemented Messages as a separate OS.
I like the point you develop. From DOS to MOS !! I’d say at this point people are caring less about bells, whistles and eye candy and would gladly appreciate a more basic “Jeep style” stealth communication option. Let’s hope somewhere out there is a genius that can not only create but also successfully deploy something like this into this tyrannical privacy hostile environment.
 
How can Apple analyses iMessages content if it’s encrypted then?
Because the whole message isn‘t encrypted. I am not sure how it works but possibly metadata and attachements isn’t encrypted. Also they have the keys to the kingdom so..
 
  • Like
Reactions: Hammerd
Insert obvious Star Wars reference...

Close the blast doors.gif
 
How can Apple analyses iMessages content if it’s encrypted then?
Likely it decrypts them first in a safe environment already on your device and only after making sure it's safe passes on to other areas of the OS. That's the "blast door" - sort of "inner door" protecting your house in case someone leaves a bomb on your porch.
 
  • Like
Reactions: Hammerd
Not with end to end encryption, they aren't - which is why everyone should care about that. And why govts are slowly gearing up to outlaw "unbreakable" encryption.
For one thing, Snowden revealed that the govt infiltrates the companies that make these product and encryption schemes. for another he also revealed that they can also simply infiltrate devices and collect at the other end - even an end to end decrypted message has to be decrypted at the other end, for the recipient to read it.
 
  • Like
Reactions: Mr Humphries
security for both the iPhone And Android has been rated insecure by leading security experts

When folks who have no idea how to create a successful smartphone looked at smartphones, they were shocked that having physical access to a smartphone DECREASES IT’S SECURITY!!!

They were also alarmed that smartphones allowed wireless signals to be sent and received AND provided a way for user to interact with them. Across the board, the cryptographers agreed that a slab of aluminum is 100% more secure than even the BEST smartphone.
 
This is not what encrypted at rest means, but yes Apple does have the capability and has responded to legal requests with iCloud backup information.

But they also do this for normal user account recovery too.

People love to blast Telegram for having cloud chat storage while at the same time ignoring that Apple not only does cloud storage as well but unlike Telegram, they will hand over all of your data to the government when a request is made.
 
I like the point you develop. From DOS to MOS !! I’d say at this point people are caring less about bells, whistles and eye candy and would gladly appreciate a more basic “Jeep style” stealth communication option. Let’s hope somewhere out there is a genius that can not only create but also successfully deploy something like this into this tyrannical privacy hostile environment.
My sig says that I tried, but I had to give up. It's a ton of effort for one person, and I'm not a genius.
 
How am I really suppose to trust that my messages aren't being passed through a government server 🤨🤔

unless the whole software is open sourced you can't I guess, but one way to detect it is, if its possible to break then some enemy state or malicious hacker group would have broken through it. For example, think of all the e-banking that is happening, if it was possible to break it a lot of people would be transferring lots of money to their bank accounts and become millionaires over night.

Its best to use open source software as much as possible made with privacy caring organizations like Signal and ProtonMail.
 
My sig says that I tried, but I had to give up. It's a ton of effort for one person, and I'm not a genius.

i think what you are aiming for is already done by threema, Signal, Matrix. There is another discord/slack alternative that is open source I just don't remember its name now.
 
i think what you are aiming for is already done by threema, Signal, Matrix. There is another discord/slack alternative that is open source I just don't remember its name now.
My design takes even more of a hardline approach than those three, which I have looked at. They all have centralized servers that are somewhat trusted. My clients don't trust the server whatsoever, not even to manage identities. The server is very dumb, mostly a packet router, and the regular user pool would use community-run servers (though they might not know this).

The key is having a mandatory, somewhat user-friendly way to establish identity out-of-band. You have to invite contacts via links that encode your pubkeys, or scan a code in person.
 
Last edited:
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.