Messaging apps are frequently exploited as the initial attack vector for spyware delivery, creating a paradox where the secure communication channel is simultaneously the pathway for compromising the device that hosts it.

The paper enumerates practical obstacles to deploying data-diode defenses in messaging apps, noting the approach is anticipated to be viable primarily for journalists, politicians, and other individuals who are targeted rather than for general consumer use.

§Deployment obstacles deployment

The paper proposes using data diodes — hardware-enforced one-way network devices — to harden messaging apps against spyware, providing a physical enforcement boundary that software-only sandboxing cannot replicate, targeted at journalists, politicians, and other high-value surveillance targets.

Abstract defense

End-to-end encryption in messaging apps such as Signal, WhatsApp, and iMessage protects against passive government surveillance but offers limited protection against targeted spyware: if a user's device is compromised, the attacker gains access to all messages regardless of transport-layer encryption.

Abstract detection