Hacker News new | ask | show | jobs
by gecko 3836 days ago
That's not what that document says. iMessage has a design flaw (which is pretty obvious if you think about how it works) that allows it to theoretically be backdoored. In other words, they made a trade-off between usability and security, and (in my opinion, and clearly yours) fucked up. That's very different from saying that they deliberately built a backdoor into the system, and I think that some of the things they've done (like explicitly noting when someone else has been added to your iCloud account, and will be able to decrypt upcoming iMessage messages) goes to some length to mitigate those issues, and make clear that the existing design is more incompetence than malice.

That said, all Apple would have to do to fix this is to allow advanced users to see all keys listed as authorized for their account. I'm getting increasingly annoyed Apple hasn't done that.

2 comments

They voluntarily signed up for PRISM. That's all you need to know.
Thanks for the correction. I doubt they'd want to go Signal for millions of users. It doesn't bode well with their NSA friendship.