MacNN | Apple denies claims it could intercept iMessages on behalf of gov't.
Mac News Network View: Standard | Headlines | Categorized | Slim
Mac News Network
Mac News iPod News Reviews Forums
 

Desktop Headlines
Apple denies claims it could intercept iMessages on behalf of gov't.
Friday, October 18, 2013 @ 10:51am

Apple is denying that it could or would want to intercept iMessage traffic, according to an official statement. In a white paper issued Thursday, security firm QuarksLab argued that despite Apple assurances in the past, Apple could use a man-in-the-middle attack to provide US agencies like the NSA or the FBI with demanded information. The attack would exploit the company's control of encryption keys to convince senders and recipients that they're communicating with each other, when in reality they're passing information through an unsecure point where Apple can listen. QuarksLab says it's not suggesting that Apple does listen, simply that it has the option if compelled.



The paper is reportedly being well-received by other security researchers. "I think what their presentation demonstrates is that it’s very difficult, but not impossible, for an outside attacker to intercept messages if they’re able to control key aspects of the network," says one researcher, Ashkan Soltani. "Probably not something that just any actor can do, but definitely something a state/government actor or Apple themselves could do, if motivated." In its new statement, Apple claims that QuarksLab's theory is just a theory, and would require reprogramming the iMessage system. "iMessage is not architected to allow Apple to read messages," says spokeswoman Trudy Muller. "The research discussed theoretical vulnerabilities that would require Apple to re-engineer the iMessage system to exploit it, and Apple has no plans or intentions to do so." The truth of Apple's statement is difficult to verify, since US agencies have gone after services like Lavabit and Skype to intercept communications, despite their promises of secure connections. Lavabit chose to shut down before handing over encryption information.

Comments on this Article
Print Friendly Version
Email to a Friend
Add MacNN to Your RSS Feeds
Buy from the Apple Store


Related Stories:

Today's MacNN Stories:

  • Hands On: Sopio (iOS) - 9:35 PM EST
  • Hands On: Duckie Deck Card Wars (iOS) - 6:43 PM EST
  • Hands On: Sync Solver (iOS) - 3:30 PM EST
  • Apple Watch: SF annex for debut, Chinese mag cover, sales plan - 2:10 PM EST
  • Daily Deals: Wacom Cintiq 13HD, 55-inch RCA HDTV, Sony action cam - 2:01 PM EST
  • Hands On: Besiege (Cross-Platform) - 11:27 AM EST
  • Hands On: Star Drift (iOS) - 7:25 AM EST
  • Briefly: Tinder adds paid option, Sonos Controller update - 6:23 AM EST
  • How 'appflows' reveal the true power of the iPad Air 2 - 4:02 AM EST
  • Follow-ups: Apple working on A123 settlement; Apple Pay adds banks - 3:03 AM EST
  • Strong security of Apple Pay exposes weakness in banking system - 1:28 AM EST

    Today's iPodNN Stories:
  • Sony shipping Project Morpheus virtual reality headset in early 2016 - 11:25 AM EST
  • Nvidia introduces Shield home console, Grid cloud gaming subscriptions - 9:57 AM EST
  • Kazam unveils octa-core Tornado 552L with 5.2-inch 1080p display - 7:40 AM EST
  • Briefly: Tesoro Excalibur Spectrum keyboard, Adata OTG microReader - 2:42 PM EST
  • Archos introduces Magnus tablet range with 'Fusion Storage' - 2:37 PM EST
  • No comments posted on this story yet. Please post yours.
    Your Comments
    In order to post comments, you must be a registered member of the MacNN Forums and logged in. Please login with your MacNN Forums username and password.

    MacNN Forums Login:

    MacNN Forums Password:

    Not a member of the MacNN forums? Register now for free.