Are Apple iMessages and Facetime Chats Really Secure From Government Spying?

The Citizen's Guide to the Future
June 18 2013 4:34 PM

Are Apple iMessages and Facetime Chats Really Secure From Government Spying?

167959932
An iPhone

Photo by Sean Gallup/Getty Images

Can you thwart government spying by using Apple chat services iMessage and Facetime? Apple has suggested that might be the case—but it’s worth remaining skeptical about the company’s claims.

Ryan Gallagher Ryan Gallagher

Ryan Gallagher is a journalist who reports on surveillance, security, and civil liberties.

In the past fortnight, leaked documents have shed light on secret National Security Agency surveillance programs involving the collection of phone records and eavesdropping on Internet communications. Apple was one of several major companies linked to an Internet spying system called PRISM, which is reportedly used by the NSA as a sort of portal through which it obtains emails, photos, videos, chats, and other data under the Foreign Intelligence Surveillance Act.

Advertisement

But now Apple has launched a privacy offensive, affirming that is committed to protecting users’ data and denying that it provided the government with any “direct access” to sift through private information stored on its servers. Of particular note, the company said in a statement Monday that its chat services iMessage and FaceTime “are protected by end-to-end encryption so no one but the sender and receiver can see or read them,” adding that “Apple cannot decrypt that data.” This implies that communications sent over these services cannot be snooped on by the government, but the reality is a little more complex and unclear.

Earlier this year, the DEA put out an internal memo claiming it was struggling to monitor iMessages because of the encryption. But the agency appeared to be having the problem because it was attempting to obtain the iMessages directly from the network provider—like Verizon Wireless—in the same way that it would obtain text messages. Carriers cannot intercept iMessages because they’re encrypted and routed over Apple servers—and the same thing applies to Facetime.

However, if the government were to go directly to Apple, it may be possible to pressure the company, in secret, to make services like iMessage and Facetime wiretap compliant. Indeed, that appears to be exactly what happened with Skype, which claimed to be encrypted peer-to-peer, yet at the same time apparently provided the NSA with access to communications.

The question, then, is whether Apple has done the same thing: Can it circumvent the encryption to facilitate surveillance when presented with a court order or search warrant? Security experts have previously said that they believe Apple has access to “master keys” that can be used to decrypt and access data stored using its iCloud service, which raises the possibility that this is also feasible for its other services. I contacted Apple and asked the company to confirm whether it had any way of accessing keys for communications sent using iMessage or Facetime, but it had not responded at the time of publication. I’ll update this post if and when I receive any answer.

Either way, communicating using iMessage or Facetime is probably moderately more secure than sending a normal text message or making a call on a cellphone or landline. But it is still a gamble and requires having a level of blind faith in Apple’s “cannot decrypt” claim, which it is not possible to independently verify. Unfortunately, the existence of secret surveillance programs that can use gag orders to force companies into silent compliance means it is unwise to make decisions on the basis of trust alone. If you are a journalist or an activist with a serious need for secure communications—or just a average citizen concerned about arbitrary invasions of privacy—it is always best to opt for open-source, peer-reviewed encryption tools. There are plenty options available, if you have the time and patience to learn how to use them.

Future Tense is a partnership of SlateNew America, and Arizona State University.

TODAY IN SLATE

Politics

Meet the New Bosses

How the Republicans would run the Senate.

Even by Russian Standards, Moscow’s  Anti-War March Was Surprisingly Grim

I Wrote a Novel Envisioning a Nigerian Space Program. Then I Learned Nigeria Actually Has One.

Photos of the Crowds That Took Over NYC for the People’s Climate March

Friends Was the Last Purely Pleasurable Sitcom

The Eye

This Whimsical Driverless Car Imagines Transportation in 2059

Medical Examiner

Did America Get Fat by Drinking Diet Soda?  

A high-profile study points the finger at artificial sweeteners.

The Government Is Giving Millions of Dollars in Electric-Car Subsidies to the Wrong Drivers

A Futurama Writer on How the Vietnam War Shaped the Series

Trending News Channel
Sept. 20 2014 11:13 AM Watch Flashes of Lightning Created in a Lab  
  News & Politics
Politics
Sept. 22 2014 11:13 AM Your Own Personal Rand Paul How the libertarian hero makes his foreign policy contradictions disappear.
  Business
Moneybox
Sept. 22 2014 12:07 PM Divestment Isn’t the Answer To destroy demand for fossil fuels, universities can do a lot better than just selling some stocks.
  Life
Dear Prudence
Sept. 22 2014 12:00 PM Dear Prudence Live Chat For September 22, 2014.
  Double X
The XX Factor
Sept. 19 2014 4:58 PM Steubenville Gets the Lifetime Treatment (And a Cheerleader Erupts Into Flames)
  Slate Plus
Science
Sept. 22 2014 8:08 AM Slate Voice: “Why Is So Much Honey Clover Honey?” Mike Vuolo shares the story of your honey.
  Arts
Brow Beat
Sept. 22 2014 11:32 AM South Park Takes on Washington’s NFL Team and Its Terrible Name
  Technology
Future Tense
Sept. 22 2014 11:23 AM Robot Plants Are the Latest in a Long Line of Robot Thingies
  Health & Science
Bad Astronomy
Sept. 22 2014 11:23 AM Two Impacts, One Landslide… on Mercury
  Sports
Sports Nut
Sept. 18 2014 11:42 AM Grandmaster Clash One of the most amazing feats in chess history just happened, and no one noticed.