[saurik]

> That being said, it does look like the app reports basic analytics but nothing sensitive.

Are you referring to the seemingly-encrypted network connection over port 5332 to a server in China at IP address 222.77.191.206 that has traffic that precisely correlates to me sending and receiving messages using the application? [edit: Which happens to be the value of the resource ServerId in the APK?]

[duaneb]

Try sending a picture--surely the size of the Chinese body would scale with the picture

[nwh]

No, pictures sent using iMessage are uploaded directly to Microsoft Azure when using a true iOS device.

http://i.imgur.com/W3QitN6.png

[outworlder]

Why does Apple use Microsoft Azure though? I would have thought that they have enough server capacity for that.

[melange]

Storing files in the cloud is a commodity service. Why wouldn't they outsource it? They use AWS too.

[anfedorov]

They're encrypted, though, right? Do they need to be sent to this third party to decrypt?

[nwh]

I don't quite remember, but I think the images are just passed over SSL with no other encryption.