This is insane: TeleGuard, a 'secure' chat app downloaded more than a million times, uploads users' private keys, meaning the company can decrypt messages.

[josephcox@infosec.exchange]

This is insane: TeleGuard, a 'secure' chat app downloaded more than a million times, uploads users' private keys, meaning the company can decrypt messages. And anyone can get anyone else's private key by just sending the user ID to the API. Possibly worst ever https://www.404media.co/a-secure-chat-apps-encryption-is-so-bad-it-is-meaningless/

[davidnielsen@mastodon.social]

@josephcox this is so insane it almost feels like a honeypot setup by the police.

[kaasbaas@social.oevents.co.za]

@josephcox who wants to bet the words "vibe" and "coded" were involved?

[rusty__shackleford@mastodon.social]

@DavidNielsen @josephcox

As someone who looked at teleGuard and ALWAYS assumed honeypot. This fucking tracks.

[sempf@infosec.exchange]

@josephcox Let me guess. It was vibe coded, right?

[stiiin@infosec.space]

@Sempf @josephcox It launched in 2021, so perhaps a bit too soon for that.