• Jeena@jemmy.jeena.net
    link
    fedilink
    English
    arrow-up
    99
    arrow-down
    4
    ·
    10 months ago

    I don’t understand why the article writes that iMessage is the only way for encrypted messaging between Android and iOS. I can thing of several off the top of my head:

    • Matrix
    • Signal
    • WhatsApp
    • Facebook Messanger (very soon)
    • Threema
    • Telegram
    • Viber
    • Line
    • Skype

    And there are surly more …

      • Jeena@jemmy.jeena.net
        link
        fedilink
        English
        arrow-up
        17
        arrow-down
        25
        ·
        10 months ago

        Then why are we shaming Apple and not the iOS users? I think Apple is totally reasonable here.

        • danhakimi@kbin.social
          link
          fedilink
          arrow-up
          29
          arrow-down
          2
          ·
          10 months ago

          Apple’s biggest crimes here are creating a proprietary platform with an exclusive protocol and making it the default messaging protocol on their devices. None of this is really new, though. All that shit is common. We need Signal or Matrix to improve in user-friendliness and even do some marketing to the point where they become viable solutions.

            • danhakimi@kbin.social
              link
              fedilink
              arrow-up
              1
              ·
              10 months ago

              in other words: the default messaging protocol is imessage, unless that’s impossible, in which case it falls back to sms.

          • Otter@lemmy.ca
            link
            fedilink
            English
            arrow-up
            2
            ·
            10 months ago

            More marketing would be nice

            As for features, an easy remote backup solution (similar to be bettet than WhatsApp) is the big one for me. Especially on iOS

          • Cheradenine@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            1
            ·
            10 months ago

            I am not an Apple fanboy at all, I have used iPhones for work previously.

            RCS debuted three years before iMessage, Apple developed iMessage because no one could get RCS standards together. We still don’t have this, Google has theirs, Samsung has another. Not all manufacturers support it and neither do all carriers. In my country it does not exist.

            I use SimpleX, but when I used a company iPhone, iMessage worked very well, and it worked everywhere regardless of carrier. RCS does not 15 years after its introduction.

            None of this is to say there should not be interoperability, clearly there should be. Historically at least, the blame lies with Google and mobile carriers.

            • GreyEyedGhost@lemmy.ca
              link
              fedilink
              English
              arrow-up
              3
              ·
              10 months ago

              I’m not letting Google off the hook, but Apple could also open the standard for iMessage and bypassed the whole problem. But they’d rather lock in customers than allow everyone to communicate securely and effectively.

          • Jeena@jemmy.jeena.net
            link
            fedilink
            English
            arrow-up
            4
            arrow-down
            3
            ·
            10 months ago

            I’m not sure about Signal being the one, then we just give the power from one company (Apple) to another (Signal). If we want to improve then we should push open protocols where people can host their own infrastructure.

            • Eager Eagle@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              10 months ago

              Ideally, I agree. In practice, until federation / decentralization is completely transparent to the end user (unless they choose otherwise), it’ll never be adopted at a large scale. IMO that’s one of the main obstacles of Lemmy, Mastodon, and others.

              Signal is only relatively popular among the privacy-respecting options because setting it up is as easy as setting up WhatsApp. Just by adding a “choose your instance” step, you can cut your user base by an order of magnitude. And that’s not mentioning the quality of service, which is much more achievable on a centralized platform, whether that’s in terms of feature parity, uptime, bug fixes, or cross-platform support.

        • HeartyBeast@kbin.social
          link
          fedilink
          arrow-up
          5
          arrow-down
          1
          ·
          10 months ago

          Message works, it’s seamless and does a good job. Sure I’ll change to something else if I need to send images or group chat with Android uses, but in the UK that generally means WhatsApp, which I am definitely not keen on.

        • Alto@kbin.social
          link
          fedilink
          arrow-up
          0
          arrow-down
          3
          ·
          10 months ago

          There is absolutely nothing reasonable with using an inferior and outdated standard compared to what literally everybody else uses.

    • Possibly linux@lemmy.zip
      link
      fedilink
      English
      arrow-up
      22
      arrow-down
      2
      ·
      edit-2
      10 months ago

      Most of those are proprietary. My list:

      • Matrix
      • Session
      • Signal and signal clients
      • Simplex Chat
      • Jami
      • Briar (android only)
      • Nextcloud talk (needs nextcloud)
      • probably a lot more
    • vrighter@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      1
      ·
      10 months ago

      telegram is not encrypted by default, and does its best to make you forget to enable it for each individual contact. if you want to do a group chat, you’re out of luck.

      Telegram is only (partially) secure for pedantic power users, which most people aren’t.

        • vrighter@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          8
          ·
          edit-2
          10 months ago

          so, relative to pretty much all other messaging services, it might as well not be.

          You’re saying “by default not everyone can read your messages, only you, the recipient, telegram themselves and anyone who they might decide to share them with, with neither your consent, nor knowledge”

          When compared to “nobody except you and the recipient” that becomes effectively equivalent to “nothing”.

          also, not end-to-end ever when it comes to group chats

          • Liquid_Fire@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            1
            ·
            10 months ago

            Almost all services in that list are closed source, so even if they use end-to-end encryption nothing stops the client from sending all your messages to anyone they like after decrypting (in fact some of them already have it as a built-in feature in the form of backups).

            • vrighter@discuss.tchncs.de
              link
              fedilink
              English
              arrow-up
              2
              ·
              10 months ago

              that would be very quickly caught by a network sniffer, because it would have to be sent from your own device. Otherwise they’d just be sharing the undecryptable ciphertext you sent to their servers

              • Liquid_Fire@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                10 months ago

                Just encrypt it before sending it to their servers. How would you tell that apart from any other traffic it sends? (E.g. to check for new messages, to update who of your contacts is online, etc)

                • vrighter@discuss.tchncs.de
                  link
                  fedilink
                  English
                  arrow-up
                  2
                  ·
                  edit-2
                  10 months ago

                  what does that have to do with anything? if you have to encrypt your messages manually yourself, that kind of proves the point that the service itself is not secure. And it’ll still show up on a network sniffer that they’re sending it to two places

      • Jeena@jemmy.jeena.net
        link
        fedilink
        English
        arrow-up
        4
        ·
        10 months ago

        I assume that if people are too lazy to switch to a solution which works for every one then they are not very interested in talking to you anyway.

        • Mongostein@lemmy.ca
          link
          fedilink
          English
          arrow-up
          3
          ·
          edit-2
          10 months ago

          Except it’s not a solution that works for everyone. It’s 9 solutions. If it were one it would be a lot easier.

          7 once you take out the ones owned by Facebook.

  • soulfirethewolf@lemdro.id
    link
    fedilink
    English
    arrow-up
    32
    ·
    edit-2
    10 months ago

    So many of these comments are pulling up the other encrypted alternatives that you can use between iPhone and other platforms. But few seem to actually be addressing the problem of actually getting other non-tech savvy people to use this stuff because they don’t actually see a problem with what they have.

    You may not realize it, but not everyone is thinking about whether or not their messages are encrypted. My own family looks at me like “🤨” when I try to convince them to use something encrypted, like I’m trying to hide a crime or something. And I’ve only gotten my parents to use other services (WhatsApp and Facebook Messenger with end to encryption turned on) by digging my heels to get them to stop using SMS. I still haven’t convinced my almost 16-year-old sister (she doesn’t really message me that much anyway. But she’s in that phase where she thinks she’s all independent, and her first places are the simple stuff she knows).

    Might I add that digging your heels at every attempt for someone to use SMS isn’t socially acceptable. I’ve only done it because they’re family and I love them

    • Cheradenine@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      23
      arrow-down
      1
      ·
      10 months ago

      Aside from the obvious reasons of competition, Beeper also used Apples infrastructure, that Beeper was then going to monetize. Not too surprising they shut it down.

      • TheMadnessKing@lemdro.id
        link
        fedilink
        English
        arrow-up
        1
        ·
        10 months ago

        No, they were charging money as they had their own APN to BPN bridge. Plus the usual cost of development and more.

        • Chozo@kbin.social
          link
          fedilink
          arrow-up
          10
          arrow-down
          1
          ·
          10 months ago

          Apple already knows that iMessage, alone, is a huge selling point for their iPhones. They held out for a few years keeping iTunes away from the rest of us before finally giving in, but I very much doubt that they’re going to open up iMessage any time soon. It’s pretty much the only thing that keeps iPhone users in their ecosystem anymore.

          • creepocreep@lemm.ee
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            1
            ·
            10 months ago

            iMessage keeps in ecosystem? I’m using iPhones for 10 years. Sent my first iMessage 2 years ago. Definitely not a main ecosystem feature for me

        • Cheradenine@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          1
          ·
          10 months ago

          That’s true, but it would be more Applelike to develop their own app. They obviously know how to do it, then they could have 100% of the profits and not have to deal with a partner. But Tim Cook said they re not interested in doing anything like that.

  • the_q@lemmy.world
    link
    fedilink
    English
    arrow-up
    32
    arrow-down
    2
    ·
    10 months ago

    If only there was a secure and open standard that would work on any platform, regardless of ecosystem…

    Oh well!

  • Eager Eagle@lemmy.world
    link
    fedilink
    English
    arrow-up
    37
    arrow-down
    8
    ·
    edit-2
    10 months ago

    At Apple, we build our products and services with industry-leading privacy and security technologies designed to give users control of their data and keep personal information safe.

    At Apple, we build our products and services with industry-leading vendor locking tactics to distance our brand from other lesser ones.

    We took steps to protect our users by blocking techniques that exploit fake credentials in order to gain access to iMessage.

    We’re not letting anyone breach this walled garden, but nice try.

    These techniques posed significant risks to user security and privacy, including the potential for metadata exposure and enabling unwanted messages, spam, and phishing attacks. We will continue to make updates in the future to protect our users.

    By using these tactics we can keep our users away from solutions that have any interoperability whatsoever and keep promoting decade-old features as new, as our sheep ahem user base don’t know any better.

  • Tiger Jerusalem@lemmy.world
    link
    fedilink
    English
    arrow-up
    29
    arrow-down
    3
    ·
    10 months ago

    We took steps to protect or users by forcing them to communicate to Android phones using unencrypted channels. After all, those peasants are not iPhone users, they deserve to be spied.

    • Keith@lemm.ee
      link
      fedilink
      English
      arrow-up
      13
      ·
      10 months ago

      Text messaging market in EU is totally different from in the United States. This is because US texting was cheap always— not so with the EU.

      • taanegl@beehaw.org
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        1
        ·
        10 months ago

        TBF Europeans just went wild with SMS. Omg. Nowadays it’s all WhatsApp, which I am not happy with.

    • Scrollone@feddit.it
      link
      fedilink
      English
      arrow-up
      3
      ·
      10 months ago

      They’re not gatekeepers in Europe because nobody uses iMessage over there. Their predominance in the US market is outside of the new EU laws.

  • Mongostein@lemmy.ca
    link
    fedilink
    English
    arrow-up
    14
    ·
    edit-2
    10 months ago

    Lots of sarcastic comments in here, but Beeper’s method was to literally spoof the serial numbers and whatnot of real machines. Do people really not see how that would be a problem?

    • rdri@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      arrow-down
      1
      ·
      10 months ago

      Do people like relying on service that requires their real device’s serial number to function?

      • Mongostein@lemmy.ca
        link
        fedilink
        English
        arrow-up
        4
        ·
        edit-2
        10 months ago

        You can use any apple device to use iMessage, your account isn’t only usable on your device. They were effectively stealing people’s machine IDs to provide this service. That’s fucked up.

        • rdri@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          10 months ago

          “Effectively stealing” means the original machine ID can’t be used by the original machine after it’s stolen, right?

      • sparky@lemmy.federate.cc@lemmy.federate.cc
        link
        fedilink
        English
        arrow-up
        3
        ·
        10 months ago

        Former Apple engineer here. This architecture isn’t ideal if you intend the service to be portable - but we didn’t! Knowing the messages can only originate from a sealed application on a first party device eliminates a whole class of spam and security problems.

        Beeper’s implementation spoofs Mac keys and requires you trust them with your Apple ID credentials if you want to be able to take full advantage of iMessage.

        It’s just pointless. A huge security risk for Apple users and to zero benefit for Android users. Let Apple implement RCS as they promised and move on. Isn’t everyone on Telegram or WhatsApp anyway…?

        • rdri@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          10 months ago

          but we didn’t!

          Well maybe that was a mistake.

          Knowing the messages can only originate from a sealed application on a first party device eliminates a whole class of spam and security problems.

          It conveniently appears to also eliminate some amount of responsibility. Seriously? Was it not known that it’s possible to debug even 1st party apps? Was it not already obvious that walled gardens are only good before they got cracked?

          A huge security risk for Apple users

          I wish engineers would stop using the word security just because they like it. Apple should try to prevent threats like pegasus instead of telling everyone that blue bubbles are a security risk.

          and to zero benefit for Android users

          Yeah, it’s more useful for apple users so they wouldn’t need to resort to unencrypted messages when talking to Android users.

          Let Apple implement RCS as they promised and move on. Isn’t everyone on Telegram or WhatsApp anyway…?

          Heh. I wish to see apple say the same in their statement of decision to shut down iMessage.

          It’s just pointless.

          Yeah. Apple doesn’t understand the community concerns, it only understands court decisions. Though sometimes these two have some connection.

  • Flaky@iusearchlinux.fyi
    link
    fedilink
    English
    arrow-up
    11
    ·
    10 months ago

    Serious question since I don’t use iMessage whatsoever, what’s going on with the iMessage stuff? Seems like multiple companies recently have tried to make apps that connect to iMessage, but there’s nothing I’ve heard about Apple opening that up. Did something happen for this to suddenly pop up more frequently?

    • BearOfaTime@lemm.ee
      link
      fedilink
      English
      arrow-up
      7
      ·
      10 months ago

      Pretty much it’s the Beeper devs and one other. But the initial setups were really nothing more than using a Mac on the backend with a an adapter to Android.

      Beeper and one (maybe two) other were pretty effective at it.

      Beeper Mini is a different thing altogether. It uses a service to translate ANP (Apple Notification Protocol?) to GCM (Google Cloud Messaging), which are the respective notification handlers.

      The Android client is able to comm directly with iMessage servers, unlike the original Beeper and the other ones.

  • misk@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    edit-2
    10 months ago

    Beeper already fixed iMessage on Beeper Cloud and is working on restoring Beeper Mini. Might take some back and forth but it still wouldn’t be surprise if it makes their reimplementation more resilient to Apple tampering.

  • cole@lemdro.id
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    10 months ago

    not surprising, but super disappointing. Beeper Mini was a dream come true

    • FutileRecipe@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      10 months ago

      You need to dream bigger. That should be the companies (Google, Apple, carriers, etc) working together and using a non-proprietary standard (an open RCS). Mini Beeper, to me, was just a proof of concept to show something akin to what Apple could do.

      • cole@lemdro.id
        link
        fedilink
        English
        arrow-up
        2
        ·
        10 months ago

        Obviously I want RCS. But I’m realistic in what I have right now. And right now what I got was working group chats

    • Possibly linux@lemmy.zip
      link
      fedilink
      English
      arrow-up
      2
      ·
      10 months ago

      For those not in the loop, why? It seems like people who want to use Apple products would just buy a iPhone.