That's it iMessage is an Apple service that allows owners of iOS devices to exchange free SMS via Wi-Fi. It is assumed, of course, that it will be a completely secure service, or at least that is what Apple claims. The company insisted in June after the NSA spy scandal that no one can read the messages of iMessage users after being encrypted on its servers.
But two security researchers have the opposite view. In Hack in the Box, a security conference held in Kuala Lumpur has demonstrated to the attendees that Apple can very well decrypt these messages, which means that secret services could comfortably with a warrant to compel them to do so , or as we have found last to leave them a backdoor and have constant access.
Their research has been published in Quarkslab's blog. The authors of the survey Cyril Cattiaux and GG they point out that their findings do not prove that Apple is watching your private mail, but that it has the ability to do so. The fanatical fans of the company could hope that their good Apple would never do that. But a record leaked from him Edward Snowden shows Apple was in the program PRISM from October of 2012. This practically means collaborating or continuing and working with the NSA.
Cattiaux and GG discovered a vulnerability in Apple's "core infrastructure" control. “the public key encryptionς είναι αυτό που προστατεύει το content of the message, but Apple retains full control of the public key on a server and so the users are vulnerable to man-in-the-middle attacks.
"The biggest problem here, Cattiaux said, is that we can't be sure" that the public key you use to encrypt the message is really your recipient's key and not, say, someone else's public key inside Apple."
Apple did not care for all of this. When asked to comment on the vulnerability, she simply referred in the June press release, in which it emphasized that it is "committed to protecting the privacy of its customers" and stated that the company was not aware of PRISM's existence until it was announced in the media informations.
Who do you think?
