this post was submitted on 14 Nov 2023
417 points (91.6% liked)

Technology

59421 readers
3944 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 179 points 1 year ago (10 children)

They've stated that they are using Mac minis as relays. They claim that they do not store messages or credentials, but I don't see how that's possible if it relies on a Mac or iOS relay server that they control.

[–] [email protected] 112 points 1 year ago* (last edited 11 months ago) (9 children)
[–] [email protected] 19 points 1 year ago (7 children)

They might be able to relay them in a way that the end to end encryption is actually handled on the phone and the relay only relays encrypted messages.

That would likely still give them a capability to MitM but it's plausible that they couldn't passively intercept the messages.

[–] [email protected] 6 points 1 year ago

They might be able to relay them in a way that the end to end encryption is actually handled on the phone and the relay only relays encrypted messages.

They'd need to control the app on both phones in order to control what it's encrypting/decrypting. Their system only works because they've got a device in the middle separately decrypting/re-encrypting each message. Google's Messages app can't read iMessages; Apple's Messages app can't read Google's proprietary encrypted RCS messages.

Of course if you want universally cross-platform messaging, complete with full-resolution photos and available with end-to-end encryption, there's this crazy new technology called "email." I feel like there's a missed opportunity for making setting up S/MIME easier.

load more comments (6 replies)
load more comments (7 replies)
load more comments (7 replies)