Nothing Chats Partner Sunbird Informs Users of Temporary Shutdown Amid Reports of Security Issues

Nothing Chats partner Sunbird has informed users that it has temporarily shut down its messaging platform, following reports of several security issues affecting the service. The company was recently in the news after it emerged as the partner for smartphone maker Nothing’s iMessage chat app for Android. Users of the app that promises access to chats from different platforms including WhatsApp, Instagram, and iMessage on the same app, have received a message stating that the company would provide additional information in the future.

In a message shared with Sunbird users over the weekend, the company announced its decision to put the service on hold temporarily. “Dear Sunbird User. We have decided to pause Sunbird usage for now while we investigate security concerns. We will update you when we are ready to proceed,” the company stated in a push notification sent to users.

A reddit user shared a screenshot of the message sent to Sunbird testers
Photo Credit: Imgur/ Reddit (ijeffgarden)

 

Another notification from Sunbird stated, “Good afternoon everyone. We are investigating the security issues raised in the last 24 hours. In an abundance of caution and to protect your confidential data, we are shutting down Sunbird media temporarily. We will keep you posted. Thank you & sincere apologies, for the inconvenience.

The shutdown of the Sunbird app comes shortly after Nothing pulled its much hyped Nothing Chats app from the Play Store — the company touted its app as a way to message iPhone users via Apple’s proprietary iMessage chat service while using the company’s Nothing Phone 2. The recently announced Nothing Chats and Sunbird — previously available to alpha testers — both ran on the latter’s service.

Over the weekend, 9to5Google reported on several issues with the Nothing Chats service that revealed that Sunbird was capable of accessing all messages and attachments (media, documents, and contact cards) that were received and sent via the Nothing chats app as they were public. Nothing Chats asks users to log in with their Apple ID, which would enable access to iMessage via a Mac server farm, according to reports. 

Meanwhile, rival messaging platform, Texts.com also published a blog post that highlighted several security flaws with the service — even demonstrating how the app’s claim of ‘end-to-end encrypted’ messages was false as the plain text version of these messages was easily accessible.

While Nothing has restricted the download of the Nothing Chats app, Sunbird appears to have shut down access to its app to fix the myriad of privacy and security issues plaguing the service. It is currently unclear when Nothing Phone 2 owners can expect to gain access to the service.

With Apple agreeing to implement support for RCS messaging in 2024, it’s only a matter of time before texting between iOS and Android users sees a vast improvement, which might negate the need for yet another third-party texting app.


Affiliate links may be automatically generated – see our ethics statement for details.

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel.


Sam Altman in Talks to Return at OpenAI as Microsoft Seeks Governance Changes at Firm: Report



Samsung Galaxy S23 FE Reportedly Receives Android 14-Based One UI 6 Update



Check out our Latest News and Follow us at Facebook

Original Source

Nothing Chats App Pulled From Google Play Store Amid Widespread Privacy Concerns

Nothing launched the Nothing Chats messaging platform last week to dismantle messaging barriers between Android and iOS devices in collaboration with Sunbird. The messaging app allows Nothing Phone 2 users to send and receive texts via iMessage enabling messages to appear as blue bubbles on iMessage. It also supports texting over the RCS protocol to other Android phones, along with SMS and MMS. However, since its announcement, a lot of users have voiced concerns over the security and privacy issues of the service. Now, the Carl Pei-led UK startup has pulled the beta for its new messaging app from the Google Play Store due to privacy concerns.

Nothing has pulled the Nothing Chats beta from Google Play Store saying it is “delaying the launch until further notice to work with Sunbird to fix several bugs”. The company did not specify the bugs or address any privacy issues.

The removal came after users widely criticised the system for transmitting Apple ID credentials via HTTP rather than the more secure HTTPS. Users are required to log in with their Apple ID through the Nothing Chats app to use iMessage services. This routes the login through a Mac located in a remote server farm. Kishan Bagaria, the founder of Texts.com, took to X to call the app “extremely insecure,” claiming that messages sent with Sunbird’s system are not end-to-end encrypted and it relies on a BlueBubbles-powered backend.

Additionally, Dylan Roussel (@evowizz) pointed out that Sunbird has access to every message sent and received through the app on your device. All of the documents (images, videos, audio, PDFs, vCards…) sent through Nothing Chats and Sunbird are public.

Meanwhile, another X user wukko(@uwukko) posted findings that the Nothing Chats app sends all messages and media attachments to Sentry. Further, “all” data is sent and stored through Firebase, and it’s also completely unencrypted.

The Nothing Chats app was built to bring iMessage support to Android. It allowed blue bubble conversations from an Android phone with iMessage users and also supports RCS (Rich communication services) between compatible devices. The app also gets features like end-to-end encryption, group messaging, live typing indications, high-resolution media sharing, read and delivery receipts, and responding with reactions, with more claimed to come in the future. 


Will the Nothing Phone 2 serve as the successor to the Phone 1, or will the two co-exist? We discuss the company’s recently launched handset and more on the latest episode of Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.
Affiliate links may be automatically generated – see our ethics statement for details.



Check out our Latest News and Follow us at Facebook

Original Source

Exit mobile version