Nothing launched the Nothing Chats messaging platform final week to dismantle messaging obstacles between Android and iOS units in collaboration with Sunbird. The messaging app permits Nothing Phone 2 customers to ship and obtain texts through iMessage enabling messages to look as blue bubbles on iMessage. It additionally helps texting over the RCS protocol to different Android telephones, together with SMS and MMS. However, since its announcement, lots of customers have voiced issues over the safety and privateness problems with the service. Now, the Carl Pei-led UK startup has pulled the beta for its new messaging app from the Google Play Store as a consequence of privateness issues.
Nothing has pulled the Nothing Chats beta from Google Play Store saying it’s “delaying the launch until further notice to work with Sunbird to fix several bugs”. The company did not specify the bugs or address any privacy issues.
We’ve removed the Nothing Chats beta from the Play Store and will be delaying the launch until further notice to work with Sunbird to fix several bugs.
We apologise for the delay and will do right by our users.
— Nothing (@nothing) November 18, 2023
The removal came after users widely criticised the system for transmitting Apple ID credentials via HTTP rather than the more secure HTTPS. Users are required to log in with their Apple ID through the Nothing Chats app to use iMessage services. This routes the login through a Mac located in a remote server farm. Kishan Bagaria, the founder of Texts.com, took to X to call the app “extremely insecure,” claiming that messages sent with Sunbird’s system are not end-to-end encrypted and it relies on a BlueBubbles-powered backend.
texts team took a quick look at the tech behind nothing chats and found out it’s extremely insecure
it’s not even using HTTPS, credentials are sent over plaintext HTTP
backend is running an instance of BlueBubbles, which doesn’t support end-to-end encryption yet pic.twitter.com/IcWyIbKE86
— Kishan Bagaria (@KishanBagaria) November 17, 2023
Additionally, Dylan Roussel (@evowizz) pointed out that Sunbird has access to every message sent and received through the app on your device. All of the documents (images, videos, audio, PDFs, vCards…) sent through Nothing Chats and Sunbird are public.
Meanwhile, another X user wukko(@uwukko) posted findings that the Nothing Chats app sends all messages and media attachments to Sentry. Further, “all” knowledge is distributed and saved by means of Firebase, and it is also utterly unencrypted.
The Nothing Chats app Orbital, the Gadgets 360 podcast. Orbital is offered on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.
