Path: ...!news.mixmin.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Your Name <YourName@YourISP.com>
Newsgroups: misc.phone.mobile.iphone,comp.sys.mac.system,comp.mobile.android
Subject: Re: DOJ is correct that Apple iPhone is far less secure than Android when RCS messaging is involved
Date: Tue, 2 Apr 2024 11:08:28 +1300
Organization: A noiseless patient Spider
Lines: 80
Message-ID: <uufb8r$2o4rt$1@dont-email.me>
References: <uud0lh$13jd4$1@paganini.bofh.team> <xn0ok1y5f5i14v001@reader443.eternal-september.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 01 Apr 2024 22:08:29 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="3acf3f2105d987cb1269cf2ee9b8bdc8";
	logging-data="2888573"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1/HxPXp4V6qhQ4iuax+SY4b1RZ0nQrlzsM="
User-Agent: Unison/2.2
Cancel-Lock: sha1:iLhmjdD14pW/rcroT4fM6jRLuLs=
Bytes: 4570

On 2024-04-01 14:57:08 +0000, badgolferman said:
> Your Name wrote:
>> On 2024-04-01 00:55:13 +0000, Tamborino said:
>>> 
>>> This is the common misunderstanding with both RCS in general and
>>> Apple's update in particular. RCS is not end-to-end encrypted.
>>> 
>>> Yet, for conversations between Google Messages users, end-to-end
>>> encryption is now enabled on your Android phone by default.
>>> https://www.forbes.com/sites/zakdoffman/2024/03/30/new-apple-iphone-
>>> 16-pro-max-and-ios-18-leak-googles-imessage-warning/    So unlike
>>> iMessaging between iPhone users or Google Messaging between Android
>>> users, or more importantly WhatsApping between iPhone and Android
>>> users, RCS between iPhone and Android will not have that level of
>>> security.
>>> 
>>> This is critical because it's the issue the DOJ highlighted in its
>>> lawsuit:  "Apple is willing to make the iPhone less secure and less
>>> private... Text messages sent from iPhones to Android phones are
>>> unencrypted as a result of Apple's conduct. If Apple wanted to,
>>> Apple could allow iPhone users to send encrypted messages to
>>> Android users while still using iMessage on their iPhone, which
>>> would instantly improve the privacy and security of iPhone and
>>> other smartphone users."
>> 
>> Yet more proof that the US DOJ has no clue what they're talking
>> about.  :-\
>> 
>> A. Apple doesn't even use RCS ... yet! It is rumoured to be coming in
>> later this year ("in the fall" if you believe a Google post)
>> 
>> B. Apple messages are end-to-end encrypted, at least between Apple
>> devices using Apple's messaging app (for other apps it is up to
>> their developers, not Apple):
>> 
>> "Your iMessage and FaceTime conversations are encrypted end-to-end,
>> so they can't be read while they're sent between devices."
> 
> This is the relevant part of the article.  There will not be encryption
> between Android and iOS users.  The DOJ says Apple can make it happen
> but are unwilling to.

More know-nothing bollocks from the US DOJ. Just read note A. above, 
Apple is already planning to support RCS, in some form.



> If this is true then it looks like Apple is being the petulant child 
> stamping their feet and saying "no, no, no..."
> 
> "So unlike iMessaging between iPhone users or Google Messaging between
> Android users, or more importantly WhatsApping between iPhone and
> Android users, RCS between iPhone and Android will not have that level
> of security."

Wrong ...

    "Apple stated it will not use any type of proprietary
     end-to-end encryption – presumably referring to Google's
     approach — but did say it would work to make end-to-end
     encryption part of the RCS standard."

Apple wants RCS to have a proper standard for encryption and not rely 
on Google's version, which for any one who knows Google (or Microsoft's 
attempts to cripple HTML) knows is obviously a good thing. Just in 
today's news is that Google's Chrome browser still collects data for 
Google even when in the supposedly private 'Incognito' mode - Google 
simply cannot be trusted, which is yet another good reason to avoid 
Android OS.
<https://www.wired.com/story/google-chrome-incognito-mode-data-deletion-settlement/> 




> "If Apple wanted to, Apple could allow iPhone users to send encrypted
> messages to Android users while still using iMessage on their iPhone..."

As above.