Sunbird had been temporarily shut down due to huge security concerns raised over it's implementation method. Nothing chats which is based on Sunbird, had also been pulled from the Play Store. After the grand announcement of Nothing chats to bridge the texting gap between iOS and Android, there was a lot of curiosity around how the whole thing works.
Reports have surfaced indicating that Sunbird and Nothing Chats have been transmitting users' Apple ID credentials to a Sunbird server via an unencrypted HTTP connection. Despite Sunbird's insistence on the security of its service and the encryption of Apple ID credentials and messages, these claims have proven to be false.
Security vulnerabilities have been identified that could potentially allow an attacker to intercept all Sunbird messages and media attachments. Furthermore, it was discovered that Sunbird employees had unrestricted access to a platform storing message contents, contact details, and URLs for attachments. An alarming number of media files, over 630,000, including images, videos, and PDFs, were found stored by Sunbird.
Texts.com has released a proof-of-concept app illustrating the ease with which iMessage conversations transmitted through Sunbird and Nothing Chats could be intercepted and read, due to the content being sent in plain text.
In response to these security concerns, Nothing Chats was removed from the Google Play Store. The company has announced its collaboration with Sunbird to address these issues. These revelations highlight the critical need for stringent security measures, especially when dealing with sensitive user data.
Sunbird, an iMessage app for Android, has announced to users that it will shut down "for now" amid major privacy concerns.
9to5google.com
via
Texts
