How I accidentally breached a nonexistent database and found every private key in a 'state-of-the-art' encrypted messenger called Converso.
  • Haakon@lemmy.mlEnglish
    16·
    1 year ago

    Wow, this is straight-up fraud. Goes to show that nobody should trust extraordinary claims from closed-source developers.

    • DaEagle@lemmy.mlEnglish
      6·
      1 year ago

      Yes, this isn’t your average “junior engineer introduces minor bug, exposes volnerability” type of problem, this is very clearly “we know very well this is terrible but we’re selling it using a bunch of buzzwords, so we couldn’t care less”…

      Sadly there aren’t a lot of meaningful legal mechanisms to sue these types of scams

  • ItsGhostEnglish
    15·
    1 year ago

    Quite frankly, their threats of legal action for a very responsible disclosure and post-mortem for future reference tells you all you need to know, they don’t give two shits about privacy/security

  • Drew@sopuli.xyzEnglish
    11·
    1 year ago

    I love this write up! It’s so annoying how many lies are just put on the internet and at such a large scale

  • Illogicalbit@lemmy.worldEnglish
    5·
    1 year ago

    This is a great write up and a good reminder that we should keep companies in check by thoroughly vetting their claims.

  • zergling_man@lemmy.perthchat.orgEnglish
    3·
    1 year ago

    Even Signal, the gold standard of encrypted messaging Who actually believes this? Journos don’t count, of course.

    Converso is not open source lol, lmao

    • AbelianGrape@beehaw.orgEnglish
      5·
      1 year ago

      Are you asking who believes that signal is the gold standard? Other encrypted chat services implement “the signal protocol” now, so… if not gold, it’s at least standard.

  • pendsv@discuss.tchncs.deEnglish
    2·
    1 year ago

    Great write-up. Honestly I found this a bit funny. I assume the marketing is completely separate then the developer/s And nobody really knew what the app is doing :D~~___~~