2026-story-defending-messaging-apps

Defending Messaging Apps Against Spyware Using Data Diodes

Peter Story · FOCI 2026 · 2026

Team notes

Auto-ingested via corpus-crawl. Tags proposed by Claude Haiku 4.5; review and tighten before relying. Marginally relevant; focuses on anti-spyware defenses for messaging apps rather than network-level censorship circumvention, but addressing surveillance threats to circumvention-adjacent tools in a censorship-focused venue.

Tags

censors: generic
techniques: dpi

findings extracted from this paper

The paper enumerates practical obstacles to deploying data-diode defenses in messaging apps, noting the approach is anticipated to be viable primarily for journalists, politicians, and other individuals who are targeted rather than for general consumer use.

§Deployment obstacles deployment generic
The paper proposes using data diodes — hardware-enforced one-way network devices — to harden messaging apps against spyware, providing a physical enforcement boundary that software-only sandboxing cannot replicate, targeted at journalists, politicians, and other high-value surveillance targets.

Abstract defense generic
End-to-end encryption in messaging apps such as Signal, WhatsApp, and iMessage protects against passive government surveillance but offers limited protection against targeted spyware: if a user's device is compromised, the attacker gains access to all messages regardless of transport-layer encryption.

Abstract detection generic
Messaging apps are frequently exploited as the initial attack vector for spyware delivery, creating a paradox where the secure communication channel is simultaneously the pathway for compromising the device that hosts it.

Abstract detection generic