Hacker News new | ask | show | jobs
by EduardoBautista 666 days ago
Are they going to arrest Zuckerberg and Tim Cook next for the encryption in WhatsApp and iMessage?
6 comments

Maybe not, if they already got backdoors?
If Apple hypothetically agreed to iMessage backdoors, why would you trust the Telegram app updates served up by Apple's app store? Western government's can pretty much hack into any device they want - the only reason for backdooring messaging apps would be for dragnet surveillance, and I don't see big tech having the appetite for the bad publicity and lawsuits that will result when that inevitably becomes public
Apple already has a kind of "backdoor": they store the keys for encrypted cloud backups in their cloud as well. They advertise that cloud data are encrypted but prefer not to mention that they also have a key to decrypt it. Even with the highest level of security [1] your contacts list in Apple Cloud are not encrypted. Why? Probably someone asked for this.

[1] https://support.apple.com/en-us/102651

No, it’s because the CardDAV standard was not created with encryption in mind. It’s also why calendar and mail are not encrypted in iCloud.
CSV or PNG weren't created with encryption in mind, but one can easily encrypt them. Apple can always make their own proprietary protocol. This doesn't explain anything. However the version that the govt wants to be able to see who is in person't contact list explains it well.
If Apple did that, people like me would accuse them of EEE.

We don’t trust proprietary stuff because we’ve been burned by it, if there’s an open standard, even a worse one: use it.

If it’s really that bad, we need to improve the standard.

CSV and PNG are not server protocols like CardDav, CalDav, and IMAP, they are file formats.
> If Apple hypothetically agreed to iMessage backdoors, why would you trust the Telegram app updates served up by Apple's app store?

I wouldn't. I don't trust Apple hardware or software, and I don't see why anyone who cares about these issues ever would. But fortunately Telegram runs on devices and OSes from a wide range of suppliers, many of which might be less open to the influences that apply to Apple.

You can download Telegram straight from its website, if you're using Android. No need to trust a third-party.
> I don't see big tech having the appetite for the bad publicity and lawsuits that will result when that inevitably becomes public

If your rationale against first-party backdoors relies on this logic, then you're in for a really big surprise when you read the Snowden leaks.

What makes you believe those do not have backdoors for Western powers?
They are US citizens, nobody dares to arrest them (except for Russia and North Korea).
No, because then they'd have to acknowledge that WhatsApp and iMessage are both compromised.
Perhaps they already have backdoors, but don't tell everyone.
I mean I wouldn't complain if they did.