Flaw in iMessage encryption revealed by researchers
by Alex Hern from Technology | The Guardian on (#17T90)
The flaw, which will be fixed by iOS 9.3, allows the encryption key used by the messaging service to be guessed by a determined attacker
Researchers at Johns Hopkins University have cracked the encryption on Apple's iMessage service, proving that a skilled attacker is capable of reading messages sent between iPads, iPhones and Macs despite the security measures protecting the devices.
The attack relies on a flaw in iMessage which will be fixed in iOS 9.3, released today. But until the software update is released, and the companion update for Mac OS, users' messages are vulnerable to eavesdropping from a determined attacker.
Continue reading...