14:21
11:41
11:17
12:43
11:08
13:10
14:21
11:41
11:17
12:43
11:08
13:10
14:21
11:41
11:17
12:43
11:08
13:10
14:21
11:41
11:17
12:43
11:08
13:10
Nothing stated that it is "delaying the launch until further notice" to address several bugs, particularly in response to reports that Sunbird, the platform provider, sends messages in plain text, compromising the security of user communications.
The Nothing Chats app, designed to allow Nothing Phone 2 users to send messages via iMessage, required users to give Sunbird access to their iCloud accounts on Mac Mini servers. However, the decision to remove it was made after users widely circulated a Texts.com blog that said messages sent through Sunbird's system lacked end-to-end encryption and were susceptible to compromise.
The app had entered beta testing just a day prior, following its announcement earlier in the week.
Investigations by 9to5Google and Texts.com shed light on security vulnerabilities in Sunbird's system. Site author Dylan Roussel highlighted Sunbird's use of HTTP to decrypt and transmit messages to a Firebase cloud-syncing server, storing them in unencrypted plain text. Roussel's findings revealed that the company has access to messages, contradicting Sunbird's claim that HTTP is only used in the initial request for iMessage connection.
Despite these concerns, Nothing has yet to provide further comments on the situation.