▲ 108 ▼ Nothing's iMessage solution might not be as secure as we thought (www.androidpolice.com) submitted 2 years ago by throws_lemy@lemmy.nz to c/technology@lemmy.world 24 comments fedilink hide all child comments
[+] Rustmilian@lemmy.world 10 points 2 years ago* (last edited 1 month ago) (2 children) [deleted] permalink fedilink source hideshow 4 child comments replies: [–] LWD@lemm.ee 6 points 2 years ago* (last edited 2 years ago) (2 children) deleted permalink fedilink source parent hideshow 4 child comments replies: [–] Bipta@kbin.social 8 points 2 years ago Your security is actually worse than a pinky promise in that case because you also have to consider that they could be hacked. permalink fedilink source parent [–] LinuxSBC@lemm.ee 4 points 2 years ago Beeper is pretty good with it, as they make it clear that it's insecure and use an encrypted protocol to get the messages to the server. Still, it's better to host your own (which Beeper lets you do, as it's just Matrix) or not use it. permalink fedilink source parent [–] wsweg@lemmy.world 2 points 2 years ago (1 child) How so? permalink fedilink source parent hideshow 2 child comments replies: [+] Rustmilian@lemmy.world 6 points 2 years ago* (last edited 1 month ago) (2 children) [deleted] permalink fedilink source parent hideshow 4 child comments replies: [–] PlexSheep@feddit.de 5 points 2 years ago (1 child) The sheer volume of cves is not necessarily an indicator for insecurity. The CVE system is pretty bad and rulings are mostly arbitrary. For example, there was a recent curl "CVE", where an overflow happened in some part of the app which was not relevant to security. I don't remember the details, but the only solution to this apperent mess was that the main contributor of curl is becoming one of the guys that evaluate CVEs. CVE is a measure for the US government, and always assumes the worst in any case. That being said, I agree with you. permalink fedilink source parent hideshow 2 child comments replies: [+] Rustmilian@lemmy.world 2 points 2 years ago* (last edited 1 month ago) [deleted] permalink fedilink source parent [–] 8ender@lemmy.world 2 points 2 years ago (1 child) My man everyone and their favourite state sponsored hacking group is trying to break iMessage, of course there’s going to be a shed load of CVEs compared to other less popular tools. permalink fedilink source parent hideshow 2 child comments replies: [+] Rustmilian@lemmy.world 2 points 2 years ago* (last edited 1 month ago) [deleted] permalink fedilink source parent
[–] LWD@lemm.ee 6 points 2 years ago* (last edited 2 years ago) (2 children) deleted permalink fedilink source parent hideshow 4 child comments replies: [–] Bipta@kbin.social 8 points 2 years ago Your security is actually worse than a pinky promise in that case because you also have to consider that they could be hacked. permalink fedilink source parent [–] LinuxSBC@lemm.ee 4 points 2 years ago Beeper is pretty good with it, as they make it clear that it's insecure and use an encrypted protocol to get the messages to the server. Still, it's better to host your own (which Beeper lets you do, as it's just Matrix) or not use it. permalink fedilink source parent
[–] Bipta@kbin.social 8 points 2 years ago Your security is actually worse than a pinky promise in that case because you also have to consider that they could be hacked. permalink fedilink source parent
[–] LinuxSBC@lemm.ee 4 points 2 years ago Beeper is pretty good with it, as they make it clear that it's insecure and use an encrypted protocol to get the messages to the server. Still, it's better to host your own (which Beeper lets you do, as it's just Matrix) or not use it. permalink fedilink source parent
[–] wsweg@lemmy.world 2 points 2 years ago (1 child) How so? permalink fedilink source parent hideshow 2 child comments replies: [+] Rustmilian@lemmy.world 6 points 2 years ago* (last edited 1 month ago) (2 children) [deleted] permalink fedilink source parent hideshow 4 child comments replies: [–] PlexSheep@feddit.de 5 points 2 years ago (1 child) The sheer volume of cves is not necessarily an indicator for insecurity. The CVE system is pretty bad and rulings are mostly arbitrary. For example, there was a recent curl "CVE", where an overflow happened in some part of the app which was not relevant to security. I don't remember the details, but the only solution to this apperent mess was that the main contributor of curl is becoming one of the guys that evaluate CVEs. CVE is a measure for the US government, and always assumes the worst in any case. That being said, I agree with you. permalink fedilink source parent hideshow 2 child comments replies: [+] Rustmilian@lemmy.world 2 points 2 years ago* (last edited 1 month ago) [deleted] permalink fedilink source parent [–] 8ender@lemmy.world 2 points 2 years ago (1 child) My man everyone and their favourite state sponsored hacking group is trying to break iMessage, of course there’s going to be a shed load of CVEs compared to other less popular tools. permalink fedilink source parent hideshow 2 child comments replies: [+] Rustmilian@lemmy.world 2 points 2 years ago* (last edited 1 month ago) [deleted] permalink fedilink source parent
[+] Rustmilian@lemmy.world 6 points 2 years ago* (last edited 1 month ago) (2 children) [deleted] permalink fedilink source parent hideshow 4 child comments replies: [–] PlexSheep@feddit.de 5 points 2 years ago (1 child) The sheer volume of cves is not necessarily an indicator for insecurity. The CVE system is pretty bad and rulings are mostly arbitrary. For example, there was a recent curl "CVE", where an overflow happened in some part of the app which was not relevant to security. I don't remember the details, but the only solution to this apperent mess was that the main contributor of curl is becoming one of the guys that evaluate CVEs. CVE is a measure for the US government, and always assumes the worst in any case. That being said, I agree with you. permalink fedilink source parent hideshow 2 child comments replies: [+] Rustmilian@lemmy.world 2 points 2 years ago* (last edited 1 month ago) [deleted] permalink fedilink source parent [–] 8ender@lemmy.world 2 points 2 years ago (1 child) My man everyone and their favourite state sponsored hacking group is trying to break iMessage, of course there’s going to be a shed load of CVEs compared to other less popular tools. permalink fedilink source parent hideshow 2 child comments replies: [+] Rustmilian@lemmy.world 2 points 2 years ago* (last edited 1 month ago) [deleted] permalink fedilink source parent
[–] PlexSheep@feddit.de 5 points 2 years ago (1 child) The sheer volume of cves is not necessarily an indicator for insecurity. The CVE system is pretty bad and rulings are mostly arbitrary. For example, there was a recent curl "CVE", where an overflow happened in some part of the app which was not relevant to security. I don't remember the details, but the only solution to this apperent mess was that the main contributor of curl is becoming one of the guys that evaluate CVEs. CVE is a measure for the US government, and always assumes the worst in any case. That being said, I agree with you. permalink fedilink source parent hideshow 2 child comments replies: [+] Rustmilian@lemmy.world 2 points 2 years ago* (last edited 1 month ago) [deleted] permalink fedilink source parent
[+] Rustmilian@lemmy.world 2 points 2 years ago* (last edited 1 month ago) [deleted] permalink fedilink source parent
[–] 8ender@lemmy.world 2 points 2 years ago (1 child) My man everyone and their favourite state sponsored hacking group is trying to break iMessage, of course there’s going to be a shed load of CVEs compared to other less popular tools. permalink fedilink source parent hideshow 2 child comments replies: [+] Rustmilian@lemmy.world 2 points 2 years ago* (last edited 1 month ago) [deleted] permalink fedilink source parent
[+] Rustmilian@lemmy.world 2 points 2 years ago* (last edited 1 month ago) [deleted] permalink fedilink source parent