How I accidentally breached a nonexistent database and found every private key in a 'state-of-the-art' encrypted messenger called Converso.
  • Haakon@lemmy.mlEnglish
    16·
    2 years ago

    Wow, this is straight-up fraud. Goes to show that nobody should trust extraordinary claims from closed-source developers.

    • DaEagle@lemmy.mlEnglish
      6·
      2 years ago

      Yes, this isn’t your average “junior engineer introduces minor bug, exposes volnerability” type of problem, this is very clearly “we know very well this is terrible but we’re selling it using a bunch of buzzwords, so we couldn’t care less”…

      Sadly there aren’t a lot of meaningful legal mechanisms to sue these types of scams

  • ItsGhostEnglish
    15·
    2 years ago

    Quite frankly, their threats of legal action for a very responsible disclosure and post-mortem for future reference tells you all you need to know, they don’t give two shits about privacy/security

  • Drew@sopuli.xyzEnglish
    11·
    2 years ago

    I love this write up! It’s so annoying how many lies are just put on the internet and at such a large scale

  • Illogicalbit@lemmy.worldEnglish
    5·
    2 years ago

    This is a great write up and a good reminder that we should keep companies in check by thoroughly vetting their claims.

  • zergling_man@lemmy.perthchat.orgEnglish
    3·
    2 years ago

    Even Signal, the gold standard of encrypted messaging Who actually believes this? Journos don’t count, of course.

    Converso is not open source lol, lmao

    • AbelianGrape@beehaw.orgEnglish
      5·
      2 years ago

      Are you asking who believes that signal is the gold standard? Other encrypted chat services implement “the signal protocol” now, so… if not gold, it’s at least standard.

  • pendsv@discuss.tchncs.deEnglish
    2·
    2 years ago

    Great write-up. Honestly I found this a bit funny. I assume the marketing is completely separate then the developer/s And nobody really knew what the app is doing :D~~___~~