Nothing Chats iMessage bridge was astoundingly insecure
appleinsider.com
Nothing and Sunbird pulled the shockingly insecure iMessage bridge, but only after it was discovered that not only did Sunbird log and retain messages, vCards, and more, but that retained user data could also be downloaded by others.
  • Will0w536@alien.topBEnglish
    2·
    10 months ago

    Jeez, what a week of headlines. I swear it started as Nothing will unveil iMessage for Android. Then shifted to Apple with adopt RCS. The Nothings BlueMessage getting taken down from the play store…to today it is getting killed entirely. This has got to be the shortest lifespan of a product for Android from initial public announcement to death blow.

  • DvnEm@alien.topBEnglish
    2·
    10 months ago

    Sorry, so the privacy concerns turned out to be WORSE than YouTubers had mentioned.

    Jfc wow.

  • jdlyga@alien.topBEnglish
    1·
    10 months ago

    If it was possible to securely integrate with iMessage and keep it updated without breaking support, someone would’ve done it years ago.

  • DigitalStefan@alien.topBEnglish
    1·
    10 months ago

    Of course it did. Some random 3rd-party proxying plaintext copies of all users messages was never going to result in success.

    I wouldn’t be surprised to learn that Apple’s 180 on adopting RCS is because they realised people will risk stupid things in an effort to interop with iMessage, which tarnishes the brand.

  • K14_Deploy@alien.topBEnglish
    1·
    10 months ago

    Nothing’s FAQ said it was encrypted. So did Sunbird just lie about it and Nothing believed them without actually checking or were they in on it? Either way that’s a bad sign, and while it’s good that they pulled it this shouldn’t have happened to begin with (also if people can just lie about encryption that says a lot doesn’t it).

    I guess it did what it was intended to do: create a media cycle towards them.

  • microChasm@alien.topBEnglish
    1·
    10 months ago

    Nothing didn’t do the development (Sunburst did), the problem is they didn’t do any due diligence before putting their name on it.

    I just have to say this is a good reason Google is whining about iMessage.

    1. ⁠They can’t access any of the iMessage data
    2. ⁠A majority of their users are primarily using free phones from C level manufacturers which cause security and crap experiences
    3. ⁠Wireless carriers shoulder the burden of support for those devices and could care less
    4. ⁠Google has tried and failed multiple times to offer a messaging app or service that sticks around. They can’t stay committed to one messaging app or service because their people don’t care. All they care about is a win when annual reviews come around.
  • ilgazcl@alien.topBEnglish
    1·
    10 months ago

    I really don’t use imessage etc stuff so I missed it. Was this an app requiring an account/SSO? If that is the case, all those SSO admins have to revoke its access immediately.

    Also their servers, cloud space whatever should be confiscated, legally imaged and securely deleted.

    This issue in hand can’t be remedied by removal from app store. It should be flagged as a PUA.

    What happened to EU, FCC etc?

  • CursedPoetry@alien.topBEnglish
    1·
    10 months ago

    PLAIN TEXT? HOW DOES THIS EVEN HAPPEN. HOW DOES THIS COULD GO THROUGH ALL THE DIFFERENT TEAMS AND CHECKS LIKE DAMN DO YOU NOT HAVE ANY INFORMATION SECURITY INFRASTRUCTURE SET UP?

  • Torley_@alien.topBEnglish
    1·
    10 months ago

    Crazy how in trying to bring some Apple over, they did the most un-Apple thing possible!