111–120 of 147 posts
Earlier quoted context omitted.
Is Teenage Engineering actually a part of a joint venture or are they just design consultants used to pump brand appeal?
Up until now I had no idea TE had anything to do with Nothing phones.
Earlier quoted context omitted.
It's too early to play guess the acronym for me. What is the MAUL part of your FAANGMAUL acronym.
Microsoft, Airbnb, Uber, Lyft. When will we stop adding companies' acronyms?
>"Sunbird actually logged and stored messages in plain text on both the error reporting software Sentry and in a Firebase store. Authentication tokens were sent over unencrypted HTTP so this token could be intercepted and used to read your messages" Which product manager in his/her right mind, thought this was passable when you're building and marketing your product as an iMessage alternative and every single early a…
> Which product manager in his/her right mind, thought this was passable when you're building and marketing your product as an iMessage alternative and every single early access reviewer raised these exact security concerns in public?
This all falls on technical leadership and the software engineers. No passing the buck to non-technical people who aren't reading or writing code and probably don't understand encryption (although they should at a place like this).
Earlier quoted context omitted.
Up until now I had no idea TE had anything to do with Nothing phones.
I like their mini synths. Never knew that they are involved with phones or anything beyond small synths tbh.
Earlier quoted context omitted.
not to mention that RCS isn’t encrypted.
google has added e2ee in their implementation but it's not part of the standard, i think they use the signal protocol rcs is too controlled by carriers for my liking. it's very much an sms replacement, rather than a protocol that treats the cell network as merely a data layer
The other story people are missing here is that even if this wasn't a security issue, iMessage is adopting RCS next year, so the whole blue/green bubble thing will become much less relevant.
As far as I've read so far Apple is adding RCS support to the Messages app, aka alongside SMS & MMS: https://www.theverge.com/2023/11/16/23964171/apple-iphone-rc... It's not clear if iMessage will interoperate via RCS, which is what would make blue/green bubbles less relevant. My assumption would be no as they'd cede moat, and there isn't much of a network effect for them to gain from.
> We believe RCS Universal Profile will offer a better interoperability experience when compared to SMS or MMS. This will work alongside iMessage, which will continue to be the best and most secure messaging experience for Apple users.
Earlier quoted context omitted.
>Why are we blaming PMs, here? Plenty of engineers out there make really stupid decisions every day. EXACTLY! Because it's a known fact all devs make mistakes, and as such, as a product manager/owner you're responsible for the bigger picture of the product and ensuring the right requirements, checks and bound are put in palce and validated for a successful product release. It's not the job of the lowly SW engineers w…
I hope this is facetious. Security is everyone’s job, and unencrypted customer data, outside of a locked-down DB, should give one pause.
Earlier quoted context omitted.
Microsoft, Airbnb, Uber, Lyft. When will we stop adding companies' acronyms?
I'll stick with the ~1T market cap software/service ones: Facebook, Apple, Amazon, Microsoft, Google/Alphabet: FAAMG; But in discussions I'll include any company that has similar tech/business requirements or behavior.
Earlier quoted context omitted.
> Apple is almost certainly aware of this at the C-Suite level What makes you think this?
iMessage is one of the primary moats keeping a lot of people on iPhone. I'm not necessarily as sure as the parent comment that the c-suite was briefed or anything, but I do think that iMessage exclusivity is pretty important to Apple