ezhes / Andromeda-iMessage

An Android client for the OSXMessageProxy API to provide iMessage on Android!
MIT License
44 stars 11 forks source link

Security #13

Closed jnorman-nyc closed 7 years ago

jnorman-nyc commented 7 years ago

What’s your take on the security of passing the message off from iMessage (end to end encryption) to Andromeda (no encryption?)? Thanks and great project.

ezhes commented 7 years ago

This project is 100% security through obscurity. I hope soon to upgrade to SSL sockets and server but it’s a time a issue and will require a rewrite. The project is small enough that unless someone specifically wants to attack YOU it’s safe.

Also is this a question or a complaint? Haha.

jnorman-nyc commented 7 years ago

Oh it was a total question. I’m not familiar with how the iMessage would be handed off. Thanks!

ezhes commented 7 years ago

Yeah, it's on the roadmap. I fully aware that unencrypted iMessage isn't great but this was really a hack.

jnorman-nyc commented 7 years ago

Huh. I wonder if you could use another messaging app with encryption (like Signal) to hand off the iMessage to it? (I am obviously not a programmer so thank you for humoring me).

vrchlabak commented 7 years ago

Hi:

Have you tested the server with MacOS High Sierra? Does it still function like Sierra?

Please let me know.

Thanks!

On Oct 5, 2017, at 7:34 AM, Salman Husain notifications@github.com wrote:

Yeah, it's on the roadmap. I fully aware that unencrypted iMessage isn't great but this was really a hack.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/shusain93/Andromeda-iMessage/issues/13#issuecomment-334484085, or mute the thread https://github.com/notifications/unsubscribe-auth/AG0HasPVqjT7UlgA4UviObEsm25OdsgSks5spOj_gaJpZM4PvBl1.

ezhes commented 7 years ago

Please create a new issue next time. Do not pick a random issue. No, I have not checked. If it's broken let me know.