苹果切断了 Beeper Mini 的访问权限
Apple cuts off Beeper Mini's access

原始链接: https://techcrunch.com/2023/12/08/apple-cuts-off-beeper-minis-access-after-launch-of-service-that-brought-imessage-to-android/

科技初创公司 Beeper 在 Android 设备上提供 iOS 消息传递功能,最近发生的一次服务中断似乎是由苹果造成的。 在推出最新产品 Beeper Mini 后,Beeper 报告称,其平台出现了广泛的问题。Beeper Mini 允许 Android 用户与 iPhone 用户交换蓝色气泡(苹果风格)消息。 错误消息通知用户,由于“查找失败”,消息无法发送,虽然最初似乎是技术问题造成的,但 Beeper 的联合创始人在回答 TechCrunch 的询问时证实,苹果很可能参与其中。 在 Reddit 问答环节中,该公司声称正在调查此事; 然而,随后的社交媒体帖子证实该服务再次正常运行。 在推出 Beeper Mini 之前,Beeper 去年推出了测试版; 作为一个多系统通信系统,该公司最近从开源项目转变为闭源产品。 其最新功能使 Android 客户能够将基于云的版本与任何支持短信的移动应用程序一起使用; 不过,它是有代价的——订阅起价为每月 1.99 美元。 尽管这一进展似乎让许多人松了口气,但考虑到 iMessage 应用程序在全球 iPhone 用户中的流行,苹果公司并没有表现出为非苹果操作系统引入跨平台同等产品的迹象。 然而,欧盟 (EU) 承诺的一些监管变化,特别是旨在鼓励跨多个平台更多采用和使用的新消费者法,可能会破坏苹果的主导地位。 事实上,尽管有传言称苹果阻止了竞争对手 WhatsApp 的网络兼容桌面版本在安装在基于英特尔的机器上安装的 Mac 操作系统上打开,但迄今为止尚未成功,但苹果本身可能会因不愿实施通用兼容性标准而面临新的压力。 不过,在大多数情况下,Beeper 等科技公司可能会在短期内密切关注这些发展。 希望监管机构迅速采取行动,纠正硅谷明显的权力失衡现象,即苹果对第三方开发商拥有相当大的影响力,而在目前的情况下,第三方开发商创建类似服务的尝试往往会受到挫败。

回应一些之前关于我对安全漏洞与软件错误的解释的评论: 软件错误漏洞通常需要手动交互或干预才能成功触发和执行。 然而,间隙会启用开发人员意想不到的功能(无论外部各方是否有意)。 软件开发的目标是最大限度地减少错误和差距,同时最大限度地提高性能、效率、可靠性、弹性、可用性、可扩展性、响应性、可观察性、可测试性等。 同时减少这两类问题可能具有挑战性; sometimes concessions must be made based on requirements and constraints. 具体回到这个主题:当时苹果发布了 https://appleinsider.com/articles/17/04/18/apples-statement-on-tim-cook-federal-case 引用的官方声明...... 作者似乎误解了它对使用 Apple 的 Beeper 扩展服务的 E2EE 消息传递的影响。 也就是说,正如之前在其他地方所解释的那样,去年 8 月 20 日在 App Store 上推出 Beeper 后不久,Apple 就确认使用其 Beeper 框架支持 iMessage 的第三方 E2EE 扩展。 然而,苹果的确认是在涉及 Epic Games 的诉讼程序期间做出的,该评论似乎是指该诉讼和由此产生的法院命令。 作为与 Epic 和解协议的一部分,苹果同意不对使用竞争性应用商店的开发者进行报复,这意味着允许第三方 iMessage 扩展不会导致苹果根据法官施加的条款和条件将《堡垒之夜》从其应用商店中删除作为惩罚 伊冯·罗杰斯和她的反垄断监管团队。 不幸的是,目前我没有看到发帖者提及此协议或确认。 引用的材料似乎表明发帖者认为苹果公司拒绝无限期地允许第三方 E2EE iMessage 扩展。 现实实际上完全不同。 从那时起,苹果公司就继续为其 Beeper 扩展服务提供官方支持。 然而,有传言称苹果公司在幕后发生了变化,并担心未来它将如何对待此类应用程序。 具体来说,围绕苹果如何处理通过其自己的服务转发的 E2EE 内容仍然存在疑问。 例如,随着 iOS 16 的一项名为“锁屏传送”的新功能的到来,传入的
相关文章

原文

Was it too good to be true? Beeper, the startup that reverse-engineered iMessage to bring blue bubble texts to Android users, is experiencing an outage, the company reported via a post on X on Friday. And Apple is to blame, it seems. Users, including those of us at TechCrunch with access to the app, began seeing error messages when trying to send texts via the newly released Beeper Mini and messages are not going through.

The error message reads: “failed to lookup on server: lookup request timed out” spelled out in red letters.

Image Credits: screenshot of Beeper Mini error

In a response to a question on Reddit as to whether or not the app was broken, a Beeper team member had earlier replied, “Report a problem from the app, give us a chance to look into it.”

However, Beeper CEO Eric Migicovsky responded to TechCrunch’s inquiry about Beeper Mini’s status by pointing us to the X post acknowledging the outage, and providing more detail. Asked if possibly Apple found a way to cut off Beeper Mini’s ability to function, he replied, “Yes, all data indicates that.”

Migicovsky, who previously founded the smartwatch Pebble, has argued that Beeper Mini wasn’t just beneficial for Android users who wanted to finally join their iMessage friends’ group chats, but that it increased security for iPhone users, too.

In an interview ahead of Beeper Mini’s launch, the founder explained that green bubble texts were unencrypted.

“That means that anytime you text your Android friends, anyone can read the message. Apple can read the message. Your phone carrier can read the message. Google… literally, it’s just like a postcard. Anyone can read it. So Beeper Mini actually increases the security of iPhones,” he had told TechCrunch.

Apple, on the other hand, sees iMessage as one of the key tools for locking in users to its ecosystem, which is why it won’t launch an iMessage app for Android. While there was some hope that EU regulations would force it to make iMessage more interoperable, news this week indicates that iMessage will get a reprieve from those rules because the service is not popular enough with business users. That means Apple has no reason not to try to shut down Beeper Mini, if it could.

Migicovsky is none too pleased with that turn of events.

“I would be very interested to hear why they think that making security worse for iPhone users makes sense,” he said.

“If it’s Apple, then I think the biggest question is — if Apple truly cares about the privacy and security of their own iPhone users, why would they try to kill a service that enables iPhones to send encrypted chats to Android users? With their announcement of RCS support, it’s clear that Apple knows they have a gaping hole here. Beeper Mini is here today and works great. Why force iPhone users back to sending unencrypted SMS when they chat with friends on Android?,” he asked.

Founded in 2020, Beeper’s team had originally been working on a multi-platform messaging aggregator, which was renamed Beeper Cloud this week as Beeper Mini went to launch. The latter uses new technology that allows Android users to text iMessage users as if they were also texting from an iPhone for just $1.99 per month. That means blue bubbles in the group chat, not green ones. Because the startup was no longer using a middleman — like a Mac server relaying messages, as other iMessage-to-Android apps employ — it would essentially appear to Apple’s servers that Beeper Mini’s messages were coming from a device that runs iMessage natively. It’s unclear, then, how Apple was able to cut off Beeper Mini’s access.

What this means for Beeper Mini’s future is uncertain.

“We’ll evaluate options,” Migicovsky said.

In a statement shared with press, Apple said:

“At Apple, we build our products and services with industry-leading privacy and security technologies designed to give users control of their data and keep personal information safe. We took steps to protect our users by blocking techniques that exploit fake credentials in order to gain access to iMessage. These techniques posed significant risks to user security and privacy, including the potential for metadata exposure and enabling unwanted messages, spam, and phishing attacks. We will continue to make updates in the future to protect our users.”

The company said that it’s unable to verify that messages sent through unauthorized maintain end-to-end encryption.

Updates from Beeper:

Updated, 12/9/23, 9:40 pm et with Apple’s statement.

联系我们 contact @ memedata.com