Top all-time · #19201
JJTech
Personal blog · jjtech.devsecurityprogramming
JJTech is a personal blog at jjtech.dev about security and programming. Since 2023, 4 different Hacker News readers have linked it 5 times, most often “iMessage Explained”. The last post was in 2023, but the archive is still widely read.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN comments link these reverse-engineering posts explaining how iMessage works, including Apple's server key exchange, while discussing Beeper Mini. The comments only cite or link the posts and do not judge the writing.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
A personal blog where I write about things that interest me, and my current projects.
Most-linked posts?
- iMessage Explained4 people · 5 mentions · first linked 2023-12-05
What Hacker News says?
I think this pypush method uses Apple servers. I think the key aspect was the author figuring out how submit public keys and request public keys for other Apple users from Apple servers. From that point it seems to be as secure as public key cryptography. https://jjtech.dev/reverse-engineering/imessage-explained/
Comment linking /reverse-engineering/imessage-explained/
on “Beeper Mini is back”Submitted iMessage Explained as a story · 4 points
HN discussionI don't think the credentials are faked. The author's blog post seems to give the details. He is publishing a public key to Apple's servers and figured out how to read the public key of other users. It seems like he is using the normal Apple encryption path from there. Although I don't fully understand the details. https://jjtech.dev/reverse-engineering/imessage-explained/
Comment linking /reverse-engineering/imessage-explained/
on “Beeper Mini is back”> Beeper Mini uses another workaround for the device UUID/serial/etc. requirement. Have you got a source on that? As far as I know, there's no workaround possible because the authentication blob is based on the UDID/serial. Put differently: without UDID/serial, there's no way of authenticating with the message servers. Beeper keeps referring to pypush when it comes to details in their write-up[0], and pypush, in tur…
Comment linking /reverse-engineering/imessage-explained/
on “Apple cuts off Beeper Mini's access”JJTech is a high school student. Neat! https://jjtech.dev/reverse-engineering/imessage-explained/
Comment linking /reverse-engineering/imessage-explained/
on “Show HN: Beeper Mini – iMessage Client for Android”