Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Surely you're joking. I don't doubt you can understand the difference between a government law enforcement agency reading your messages and some guy off the street reading your messages.

Neither Apple nor the NSA will, for example, immediately rack up a string of fraudulent charges on every credit card number that it sees come through its system. Some random guy in China? I'd say there's a pretty high chance that's exactly the reason this app is in the app store.



>> "I don't doubt you can understand the difference between a government law enforcement agency reading your messages and some guy off the street reading your messages."

I'd feel more secure with just some guy off the street reading my messages. Fortunately I don't ever send CC#'s through messaging services so there's very little else he could do.


where is your proof that the guy off the street in this case isn't the chinese government?


I didn't mention this case I was speaking more generally. And I'd personally be more worried with what the US government knows about me than the Chinese. I have many more interactions with American people and businesses and I like to visit there. I don't have much if any interaction with China so it doesn't bother me as much.


That still makes no sense. Your information has been leaked to one party, so you're okay with it leaking to others as well? Also, it's not just what they know, it's what they do with that knowledge. And it seems pretty absurd to make the claim that the US has had worse precedence in this regard than China.


Worry about it when you're important enough for the Chinese government to care what you do? I'm certainly not.


No, it is not a joke. iMessage is not a secure communications channel. With this app in the wild, it is pretty clear it is not a secure communications channel. You should not post CC information along an insecure communications channel.

You may be right that there is more risk involved now, but it is nice to get the point out in the open.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: