Hacker News new | ask | show | jobs
by orangecat 921 days ago
If an "unsanctioned" client can compromise iMessage security, then there was no actual security other than obscurity.
1 comments

I didn't compromise the security of iMessage as a whole, it just exploited a way to get people into the system that was not planned.

Imagine there is a theme park that has normal ticket booths and some requirements there to get in. Then there comes a Beeper that finds a hole in the fence on the perimeter and sets up their ticket booths there. It's in theme park's best interest to close that hole and cut off the revenue stream of somebody pigging back on their theme park.

Except they charge a thousand dollars to enter and then let everyone else in for free but they have to wear a badge and the pictures they get from the roller coaster photo booth are 240p.
And no one is obligated to come to the Theme park. There's an entire world of people who never visit the theme park, mock the people who do, and couldn't care less about it. But some people want to be included as going to the park, when they don't. Some people are very judgy and don't want to talk to people who don't go to the park...

Okay, I've stretched the metaphor out enough.

Almost 60% of America is in the theme park.
> Except they charge a thousand dollars

A Lamborghini Urus costs $230k so I guess it's morally acceptable to break into a dealership and steal it.

Kind of, yeah. Once something is expensive enough it's no longer common theft, it's a heist.
Blackmail is such an ugly word. I prefer extortion. The "x" makes it sound cool.