{"id":10045,"date":"2023-11-19T16:49:46","date_gmt":"2023-11-19T13:49:46","guid":{"rendered":"https:\/\/wikidollar.net\/10045\/nothing-chats-beta-app-pulled\/"},"modified":"2023-11-19T16:49:47","modified_gmt":"2023-11-19T13:49:47","slug":"nothing-chats-beta-app-pulled","status":"publish","type":"post","link":"https:\/\/wikidollar.net\/?p=10045","title":{"rendered":"Nothing Chats Beta app pulled out of Play Store after privacy issues reported"},"content":{"rendered":"

Nothing Chats Beta app pulled out of Play Store after privacy issues reported\u060c<\/p>\n

\n

Days after announcing the RCS-based Nothing Chats beta and rolling it out yesterday, the company pulled the app from the Google Play Store, saying the app was delaying its launch until further notice. Nothing could exterminate several bugs discovered in the beta, however, it had to be removed from the Play Store after a major privacy issue was reported.<\/p>\n

For the uninitiated, Nothing Phone 2 users can use iMessage-like RCS to communicate with other users. RCS is a type of communication protocol that allows sending text, videos, photos, stickers, etc., unlike SMS. With Nothing Chats Beta, the RCS-based app<\/a> uses a platform provided by Sunbird which, in turn, requires users to log in to their iCloud accounts.<\/p>\n

A Texts.com blog went viral, prompting Nothing to remove the app from the Play Store. It turns out that the beta app doesn’t support end-to-end encryption, as mentioned in its FAQ.<\/p>\n

\n
\n
\n

Sunbird has access to all messages sent and received through the app. They do it by abusing @getsentry<\/a>which is used to monitor errors.<\/p>\n

But Sunbird logs the messages, pretending they are errors.<\/p>\n

Here is part of the requests (img 1, 3) and their entire \u201cmessage\u201d (img 2, 4) pic.twitter.com\/pzwwQVWfOb<\/a><\/p>\n

\u2013 Dylan Roussel (@evowizz) November 18, 2023<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

To explain it better, you need to sign in to your iCloud account on Sunbird to use Nothing Chats Beta. Sunbird does not natively support encryption, which means intruders can exploit its servers to read all your sent and received text because it is plain text. Having encrypted text makes it difficult for intruders to evaluate the content of these messages, making them much more secure.<\/p>\n

As for Sunbird, it abuses a feature called Gentry which monitors for errors. It turns out that the platform logs all messages sent and received, disguising them as errors. To put it simply, any messages you exchange on Sunbird (and Nothing Chats Beta) remain on their servers unencrypted, which is a major privacy issue. Additionally, your iCloud ID is also associated with messages that can be used to attack and access your contacts, notes, photos, videos and much more.<\/p>\n

This then shows how Nothing Chats Beta could have been a privacy issue if it had remained on the Play Store, available for users to download.<\/p>\n

\n
<\/figure>\n<\/div>\n

Apple announced native support for RCS when communicating with Android phones and the feature will arrive in 2024. It turns out that the current privacy issue will not pose problems in Apple’s decisions given that it attempts to preempt the EU DMA’s potential decision to set RCS as default. in the 27 EU member countries if iMessage is declared as a \u201cguardian\u201d application.<\/p>\n

You can follow Smartprix on Twitter<\/a>, Facebook, Instagram and Google News. Visit smartprix.com for the latest news, reviews and technical guides.<\/p>\n<\/div>\n