Hacker News Reader

Comment by microtonal | Hacker News Reader

They can't create trusted public keys after the fact,

Of course they can. They own the directory server that hands out keys.

http://blog.cryptographyengineering.com/2013/06/can-apple-re...

tl;dr: Apple can send you a public key of Bob's new device. Apple can pretend to send you a public key of Bob's new device. And since it's proprietary software, they can trigger a resend of your recent messages to Bob.

Moreover, if you use iCloud backups, they have the keys to your kingdom, since it fails the 'mud puddle test':

http://arstechnica.com/security/2013/06/can-apple-read-your-...

View on HN

So this ends up being as "simple" as answering the question: Do you trust Apple? Given they control the operating system and all around it, having the directory server controlled by someone else (or distributed) doesn't solve the problem as they have access to anything they want in your device, meaning they don't need any keys to begin with.

I wouldn't trust any company that blatantly dodges the question of security with a half truth. It's clear he's playing word games for PR points.

You can reset your password and redownload all of your messages to a new device if you use iCloud backup. Cook is full of shit when he says that Apple doesn't have the capability. They own the system.

Even a dedicated civilian could reset your password, associate a device with your account and receive all messages going forward. To state that Apple cannot is such a laughable claim that it becomes clear that it's just a PR game. Which calls into question how sincere he is in his feelings about privacy.

For the record, you cannot redownload old messages in iMessage; if you use iCloud Backup, a civilian could fetch messages from there, but if not, they're out of luck.

Fair enough, I was mistaken. Security is hard, but no one should get a pass playing games like this when it comes to security.

A civilian could still associate another key (device) to the account if they're dedicated with the password or a password reset (not as stealthy) assuming 2FA is disabled. And Apple could surely do it stealthily since they own the system.

They have the capability, and it's too kind to his statement by calling it a half-truth in that respect because it's really a lie when he says "[Apple doesn't] have the capability."

>And since it's proprietary software, they can trigger a resend of your recent messages to Bob.

Apple control iOS so they could just release an update that disables crypto and leaks all the messages - your point is irrelevant since they can't trigger a resend without an update to iOS.

And you know this ability isn't latent with iOS currently how?

Reply on news.ycombinator.com