Nothing Chat chat app removed from Google Play due to privacy concerns

On November 19th, mobile phone manufacturer Nothing announced that the beta version of Nothing Chats has been removed from the Google Play Store and stated that "the release will be postponed until further notice in order to work with Sunbird to fix multiple bugs."

This site noticed that an article on the Texts.com blog has attracted widespread attention. The blog shows that the Sunbird system is used The messages sent are not actually end-to-end encrypted and can be easily cracked.

Sunbird responded by denying any security issues, and justifying its implementation, doubling down on its security, "Although the protocol is HTTP, all data is encrypted."

The key used to encrypt this data is provided over HTTPS, so the Apple credentials or messages sent through this HTTP request are secure and not available to the public.

HTTP is used only as part of a one-time initial request by the application to notify the backend of an upcoming iMessage connection iteration over a separate communication channel.

Sunbird’s ISO27001 certification (certificate number: IA-2023-09-21-01) is an internationally recognized information security management system specification that reflects its commitment to user privacy.

## Many users did not buy into Nothing’s tweets , claimed: "You call the lack of end-to-end encryption, public data exposure, and lack of HTTPS protocol a 'bug'." "We now classify data privacy issues as a 'bug'?"

The above is the detailed content of Nothing Chat chat app removed from Google Play due to privacy concerns. For more information, please follow other related articles on the PHP Chinese website!