All is well for Nothing with the launch of Nothing Chats, a Sunbird-based chat app through which it is possible to chat with iMessage from Android. Announced last Wednesday, Apple announced the next day that it would crash the party by adapting the RCS standard. Later, several researchers They found serious security vulnerabilities in the application and finally, while the issue was being clarified, nothing paused the download of the application on Google Play.

Nothing Chats uses Sunbird technology to enable iMessage chatting on Android; including blue bubbles, but some of the advertised features like end-to-end encryption of all messages They don’t seem rightAccording to several security researchers.

Nothing Chats won’t last long on Google Play

Today it is not possible to use iMessage on Android and all possible solutions like Beeper or Sunbird, iMessage is being used on another device used as a bridge Between the Mac ecosystem and our Android. In Sunbird’s case, it’s a farm of Mac servers that theoretically allow Android phones to communicate securely, including end-to-end encryption and without saving a copy of your messages.

The problem is the system seems much less secure than it was introduced. Reviews of Texts.blog, Dylan Roussel, Wuko and others detail Nothing Chats and Sunbird, which they call a “privacy nightmare.”

From It uses HTTP, not HTTPS whereat all messages are saved without encryption It’s in Firebase and can actually be accessed by anyone interfering with it. Token, is sent insecurely. Moreover, Sunbird is technically capable of: read every message users.

Sunbird for its part advocated the implementation and implementation ofThe best evidence of privacy issues are the proofs of concept available on Github, accompanied by code that demonstrates different Sunbird vulnerabilities and how to do them. messages are saved in clear text in the Firebase database.

Despite all this, Nothing Chats is Sunbird by design, so Sunbird vulnerabilities are Nothing Chats vulnerabilities. expired, Nothing decided to remove Nothing Chats from Google Play until “some bugs are fixed”.

So what was supposed to be a marketing ploy on the part of Nothing ended up making quite a bit of profit buzzYes, although it is not good. First, Apple’s announcement that it will support RCS in the future overshadows some of the benefits Although not all of an app like Nothing Chats: the green bubbles issue was still present.

Now the system’s privacy issues and the app’s “forced” separation from the app store are affecting another of the app’s main claims: its security. I will have to see if the app returns to the store in the future and, if so, whether users will trust it.

via | 9to5Google

Xataka on Android | WhatsApp adds passcode keys as alternative to SMS verification