Thanks for sharing. Such an interesting read. I've read many times about databases being exposed publicly, but when a company explicitly states they are using state of the art security and drag other companies through the mud... Man, that really takes the cake.
I shudder to think what it must be like to be a developer there, knowing they're lying so blatently.
2023-05-05: Converso asks: 'How were you able to decompile the source code of the app and what do you think should be done to protect against that in the future?'
So I think some of the devs were in way over their heads too!
The fundamental problem with cryptography is that it's significantly harder to create a system that others can't crack than to create a system that you yourself can't crack.
I get that building secure communication from scratch is hard, but claiming those things is just outrageous. I see absolutely nothing for them to gain for making such an app with unsubstantiated claims.
In the list of features of their app, they've somehow "trademarked" Sensors Off™ and Screenshot Protect™, like they're some kinds of novel features
10 Comments
pitl@lemmy.sdf.org · 9 pts · 3y
I... don't think I've ever read about the ball being dropped this hard on anything before. This is incredible.
bobbias@lemmy.dbzer0.com · 7 pts · 3y
Holy shit. Talk about getting owned.
JaumeI@programming.dev · 7 pts · 3y
Interesting reading, thanks!
Namstel@programming.dev · 5 pts · 3y
Thanks for sharing. Such an interesting read. I've read many times about databases being exposed publicly, but when a company explicitly states they are using state of the art security and drag other companies through the mud... Man, that really takes the cake.
I shudder to think what it must be like to be a developer there, knowing they're lying so blatently.
Threen@aussie.zone · 6 pts · 3y
In the timeline at the bottom it says:
So I think some of the devs were in way over their heads too!
Kempeth@feddit.de · 3 pts · 3y
The fundamental problem with cryptography is that it's significantly harder to create a system that others can't crack than to create a system that you yourself can't crack.
msage@programming.dev · 4 pts · 3y
I get that building secure communication from scratch is hard, but claiming those things is just outrageous. I see absolutely nothing for them to gain for making such an app with unsubstantiated claims.
ActuallyRuben@actuallyruben.nl · 3 pts · 3y
In the list of features of their app, they've somehow "trademarked" Sensors Off™ and Screenshot Protect™, like they're some kinds of novel features
Threen@aussie.zone · 1 pts · 3y
gkd@programming.dev · 1 pts · 3y