386
Nothing Phone builds a blue bubble iMessage bridge while Google and Apple fight over RCS
(www.androidcentral.com)
this post was submitted on 14 Nov 2023
386 points (91.8% liked)
Technology
58157 readers
3528 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
They've stated that they are using Mac minis as relays. They claim that they do not store messages or credentials, but I don't see how that's possible if it relies on a Mac or iOS relay server that they control.
deleted
They might be able to relay them in a way that the end to end encryption is actually handled on the phone and the relay only relays encrypted messages.
That would likely still give them a capability to MitM but it's plausible that they couldn't passively intercept the messages.
deleted
Absolutely. The iMessage network isn’t some unknowable beast, it “just” requires an Apple device be involved and activated to work. In order to spoof that far, you’d essentially need to emulate quite a bit on device.
deleted
deleted
If it's anything like Beeper 's Matrix bridge then it's E2EE Matrix encrypted between your device and the bridge server and then using Apple's iMessage encryption between the bridge server and Apple/the other user.
The weak point is always going to be the bridge software as by necessity the message must be decrypted there to re-encrypt for iMessage.
At least in Beeper/Matrix the bridge software is open source and one can host their own bridge while continuing to use the existing Beeper/Matrix main server.
Doing so gives you no-trust security since the Beeper/Matrix host cannot decrypt the messages between you and the bridge you control and rubbing your own bridge eliminates that weak point.