I’m not pulling anything Beta version with no chat The Google Play Store says it’s “delaying launch until further notice” while fixing “several bugs.” The app promised to let Nothing Phone 2 users send text messages with iMessage, but Sunbird, which provides the platform, said it would allow users to log into their iCloud accounts on their own Mac Mini servers. It was necessary to do so. Isn’t this… great?
This removal came after users shared it widely. Texts.com Blog This shows that messages sent on Sunbird’s system are not actually end-to-end encrypted, and that it is not difficult to compromise. The app was released in beta yesterday after being announced earlier this week.
9to5Google pointed to the thread from Site Author Dylan RousselHe discovered that part of Sunbird’s solution involves using HTTP to decrypt messages, send them to a Firebase cloud sync server, and store them in unencrypted plain text. . Roussel posted: The company itself uses Sentry, a debugging service, to log messages as errors so they can access them.
Sunbird claimed yesterday HTTP is “used only as part of a one-time, initial request from the app to notify the backend of an upcoming iMessage connection.”
That was in response to something someone pointed out Texts.com Blog Investigating vulnerabilities. Texts.com writes that “an attacker registered with the Firebase real-time database can access messages at any time, before or at the moment a user reads them.” The blog also notes that the company may be able to see the messages on his Sentry dashboard, which means Claim from Nothing’s FAQ Sunbird means that no one has access to messages sent or received.
We reached out to Nothing for further comment, but the company did not respond by press time.