Apple affirms that the iMessage exploit has been blocked

The Beeper Mini software, which enabled Android users to receive text support for iMessage, was always going to cause problems as soon as Apple noticed it, even before it was released this week. And it has caught Apple’s notice. The entire Beeper platform seemed to be down yesterday, which led to rumours that the maker of the iPhone had started turning off the iMessage workarounds. As of this morning, Beeper Mini continued to post on X that it was investigating and might be able to resolve the outage, but, given Apple’s announcement today, that may all have been for nothing.

“We took steps to protect our users by blocking techniques that exploit fake credentials in order to gain access to iMessage,” Apple stated. “These methods exposed users to serious security and privacy risks, such as the possibility of metadata exposure and the facilitation of spam, phishing, and unsolicited messages.” In the future, we’ll keep updating to keep our users safe.”

Apple does not specifically name any apps, but it makes sense that this alludes to the platform’s exploit given the time of Beeper Mini’s release and its current issues. A high school student devised Beeper’s approach, which first transmitted users’ texts to Apple’s servers before forwarding them to their intended recipients. Even without an Apple ID, potential messengers could use Beeper Mini to access iMessage; nonetheless, end-to-end encryption was available for talks between users of the Android app and those using the Apple ID app.

Additionally, Apple stated today that it is unable to confirm that communications transmitted using unauthorized channels and seeming to be from legitimate accounts can still maintain end-to-end encryption. Beeper had expected that this workaround would eventually be discontinued, and it appears that the message gap between iOS and Android is still present for now.