this post was submitted on 05 Dec 2023
41 points (82.5% liked)

Technology

36095 readers
100 users here now

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

founded 5 years ago
MODERATORS
 

All messages are end to end encrypted. Also you don't need an Apple account and it connects directly to Apple servers.

all 41 comments
sorted by: hot top controversial new old
[–] will_a113@lemmy.ml 45 points 1 year ago (3 children)

Their "how it works" blog article is worth a read - they're using a blackbox reverse engineering of the protocol and re-implementing it natively in the app, so there are no man-in-the-middle servers. Impressive software engineering for sure.

[–] Apollo2323@lemmy.dbzer0.com 13 points 1 year ago (2 children)

For sure very interesting! And its open source and you can run it in your computer if you have the knowledge.

[–] will_a113@lemmy.ml 5 points 1 year ago

Yup, the PyPush python-based proof-of-concept can run pretty much anywhere there's python.

[–] minishoemaze@beehaw.org 0 points 1 year ago (3 children)

I'm aware regular Beeper can be self-hosted, but Beeper Mini can too? Is there any more information on this or is that the "if you have the knowledge" part?

[–] biscuitswalrus@aussie.zone 5 points 1 year ago* (last edited 1 year ago) (2 children)

The mini version doesn't need hosting, it doesn't have a proxy middle man. A 16yo kid reverse engineered the protocol and then got contracted by beeper to implement it as beeper mini. It's a client directly connecting to apple like imessage native.

Will it break? I'd argue if the cost of breaking it in engineer time is worth doing to Apple, yes. All they'd have to do is roll their own crypto and reverse engineering that might be impossible. Probably easier ways to break it but then maybe it turns into a cat and mouse game.

Legally it's hard to say if it's OK too, the end user is likely fine, but the developer especially being contacted may not be since to reverse engineer it could be breaking terms of service or licensing clauses though I'm not really sure what kind of damages could be claimed. To reverse engineer they had to use the original on jailbroken iphones to go through the engineering discovery.

Anyway the point is, it's not going through beeper or anywhere other than Apple. So there's no component to host. It's different to beeper.

[–] LinuxSBC@lemm.ee 3 points 1 year ago (1 children)

The problem is that breaking it will also break a lot of Apple devices.

[–] biscuitswalrus@aussie.zone 2 points 1 year ago

Hmm you could be right. Keeping old protocols running for legacy compatibility reasons could in this case keep the solution working for some time.

[–] Bene7rddso@feddit.de 1 points 1 year ago

what kind of damages could be claimed.

According to Apple users, the color of their bubble has a lot of value

[–] will_a113@lemmy.ml 4 points 1 year ago

I don't know about the app itself, but the blog article links to the PyPush python-based proof-of-concept, which you can run pretty much anywhere.

[–] brihuang95@sopuli.xyz 6 points 1 year ago (1 children)

huh, interesting. so from a security perspective is there any other concern with this protocol? at least they're not using a mac relay server like Nothing Chats was

[–] skullgiver@popplesburger.hilciferous.nl 16 points 1 year ago* (last edited 1 year ago) (2 children)

[This comment has been deleted by an automated system]

[–] LinuxSBC@lemm.ee 4 points 1 year ago

The app itself is closed-source, but they use PyPush, which also has a blog post explaining how it works.

[–] Apollo2323@lemmy.dbzer0.com 3 points 1 year ago (1 children)

You can ask more questions on Reddit!

If you have any questions, I'm hosting an ask-me-anything on reddit.com/r/beeper - feel free to ask any questions you have for us there (after reading our blog posts first to see if it's already been answered!)

[–] QuarterSwede@lemmy.world 17 points 1 year ago

Heads up: People on Lemmy typically hate Reddit. That’s why we’re here and not there.

[–] Moonrise2473@feddit.it 20 points 1 year ago (1 children)

I'm not American and I don't see how having iMessage on Android is worth the $2 monthly.

In my whole life I never knew a single person that was reachable only on iMessage or that was so stubborn to ignore messages on any other platform

[–] Apollo2323@lemmy.dbzer0.com 9 points 1 year ago

Yeah but that's how it is here in America , I love my Android and will never change so I guess I am stubborn too.

[–] Frederic@beehaw.org 11 points 1 year ago (4 children)

But why the obsession with iMessage and apple product?!? We don’t care about the colour of the bubble!!!

[–] nudnyekscentryk@szmer.info 15 points 1 year ago (3 children)

Apparently American teenagers do and will straight up bully you if you have an Android.

[–] The_Sasswagon@beehaw.org 12 points 1 year ago (1 children)

If only it was just teenagers, physically grown ass men and women do this too. Have had some I thought were good friends cut me off from talking to them "because I didn't have an iPhone".

[–] isVeryLoud@lemmy.ca 12 points 1 year ago (1 children)

IMO people who are that petty aren't worth having in your life.

[–] The_Sasswagon@beehaw.org 3 points 1 year ago

That's what I figured too.

[–] TheEntity@kbin.social 7 points 1 year ago (1 children)

Placating them doesn't look like a great solution to me.

[–] trk@aussie.zone 4 points 1 year ago

Sounds like a pretty great litmus test of a person's character

[–] lazylion_ca@lemmy.ca 3 points 1 year ago

iMessage group chats.

[–] will_a113@lemmy.ml 2 points 1 year ago

Network effect. Gradually over time my whole extended family wound up with iphones for one reason or another, and Android phones would consistently break our group threads. The last few holdouts (not ideologically, they just didn't need new phones) wound up switching to Apple afterwards to make everything smoother for the rest of us.

[–] Eikichi@lemmy.ml 3 points 1 year ago (2 children)

A lot of work, data scrapping and security issue just for a pin ?

Seriously ?

What the point, except to simulate the possession of an iPhone to someone who should be a stranger for you or at least physically far from you ?

I clearly don't get it.

Scam interest after a sim swapping attacks ? The goal, need to know it !!

[–] minishoemaze@beehaw.org 13 points 1 year ago (1 children)

I take it you're not from the US 😅 texting is still the default here, and since apple refuses to open up iMessage and has not yet implemented RCS, Cross-Platform communication is pretty shitty. People get excluded from group chats because even a single user on a different platform will set it back to MMS

[–] Evkob@lemmy.ca 14 points 1 year ago (1 children)

Yeah I've been excluded from work group chats on two separate occasions because they used iMessage and considering another platform was just entirely off the table.

Although to be honest, I consider being excluded from work group chats to be one of the best features of my phone!

[–] Apollo2323@lemmy.dbzer0.com 6 points 1 year ago

Lol me too but I just had some friends that refuse to answer messages if its not on iMessage. I really hate Apple for doing this and I hope they get forced to open the protocol.

[–] QuarterSwede@lemmy.world 2 points 1 year ago

iMessage is pretty great to use honestly. Supports encryption, Tapbacks, read receipts, sharing any file type (not just pictures and video). RCS isn’t implemented in iOS yet and on launch won’t support encryption (supposedly Google is working to add it to the RCS standard, not just Google’s fork, now that Apple announced future support for the standard).