All messages are end to end encrypted. Also you don’t need an Apple account and it connects directly to Apple servers.

You are viewing a single thread.
View all comments
45 points

Their “how it works” blog article is worth a read - they’re using a blackbox reverse engineering of the protocol and re-implementing it natively in the app, so there are no man-in-the-middle servers. Impressive software engineering for sure.

permalink
report
reply
28 points

The tech is called PyPush and was developed by a teenager and purchased by Beeper.

permalink
report
parent
reply
13 points

For sure very interesting! And its open source and you can run it in your computer if you have the knowledge.

permalink
report
parent
reply
5 points

Yup, the PyPush python-based proof-of-concept can run pretty much anywhere there’s python.

permalink
report
parent
reply
0 points

I’m aware regular Beeper can be self-hosted, but Beeper Mini can too? Is there any more information on this or is that the “if you have the knowledge” part?

permalink
report
parent
reply
5 points
*

The mini version doesn’t need hosting, it doesn’t have a proxy middle man. A 16yo kid reverse engineered the protocol and then got contracted by beeper to implement it as beeper mini. It’s a client directly connecting to apple like imessage native.

Will it break? I’d argue if the cost of breaking it in engineer time is worth doing to Apple, yes. All they’d have to do is roll their own crypto and reverse engineering that might be impossible. Probably easier ways to break it but then maybe it turns into a cat and mouse game.

Legally it’s hard to say if it’s OK too, the end user is likely fine, but the developer especially being contacted may not be since to reverse engineer it could be breaking terms of service or licensing clauses though I’m not really sure what kind of damages could be claimed. To reverse engineer they had to use the original on jailbroken iphones to go through the engineering discovery.

Anyway the point is, it’s not going through beeper or anywhere other than Apple. So there’s no component to host. It’s different to beeper.

permalink
report
parent
reply
4 points

I don’t know about the app itself, but the blog article links to the PyPush python-based proof-of-concept, which you can run pretty much anywhere.

permalink
report
parent
reply
4 points

I’m aware regular Beeper can be self-hosted, but Beeper Mini can too?

The difference between old and new is that all the services on the old one rely on Matrix bridges and the new one will not. They claim iMessage, Signal and WhatsApp will all be working on-device. So those obviously won’t be self-hosted. The rest they have yet to decide exactly how they will implement them but Matrix is going to be part of it.

Brad Murray said the end goal is to have everyone messaging each other directly on Matrix.

permalink
report
parent
reply
6 points

huh, interesting. so from a security perspective is there any other concern with this protocol? at least they’re not using a mac relay server like Nothing Chats was

permalink
report
parent
reply
16 points
*

[This comment has been deleted by an automated system]

permalink
report
parent
reply
4 points

The app itself is closed-source, but they use PyPush, which also has a blog post explaining how it works.

permalink
report
parent
reply
3 points

You can ask more questions on Reddit!

If you have any questions, I’m hosting an ask-me-anything on reddit.com/r/beeper - feel free to ask any questions you have for us there (after reading our blog posts first to see if it’s already been answered!)

permalink
report
parent
reply

Technology

!technology@lemmy.ml

Create post

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

Community stats

  • 4.9K

    Monthly active users

  • 2.4K

    Posts

  • 41K

    Comments

Community moderators