Close Menu
TechBrunchTechBrunch
  • Home
  • AI
  • Apps
  • Crypto
  • Security
  • Startups
  • TechCrunch
  • Venture

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

What's Hot

Jack Dorsey says his “safe” new bitchat app hasn't been tested for security

July 9, 2025

Hallucinations about soundslice on chatgpt music app frequently, founders have made to lie

July 9, 2025

David George on the Future to be released in 2025

July 9, 2025
Facebook X (Twitter) Instagram
TechBrunchTechBrunch
  • Home
  • AI

    OpenAI seeks to extend human lifespans with the help of longevity startups

    January 17, 2025

    Farewell to the $200 million woolly mammoth and TikTok

    January 17, 2025

    Nord Security founder launches Nexos.ai to help enterprises move AI projects from pilot to production

    January 17, 2025

    Data proves it remains difficult for startups to raise capital, even though VCs invested $75 billion in the fourth quarter

    January 16, 2025

    Apple suspends AI notification summaries for news after generating false alerts

    January 16, 2025
  • Apps

    Hallucinations about soundslice on chatgpt music app frequently, founders have made to lie

    July 9, 2025

    Google brings gemini to wear OS watches and adds AI modes to circles to search

    July 9, 2025

    Gmail's new “Manage Subscriptions” tool helps you organize your inbox

    July 8, 2025

    OneText raises $4.5 million from Khosla's Y Combinator and reinvents textual shopping

    July 8, 2025

    The ordinance reports that it will release a US-specific version of Capcut

    July 8, 2025
  • Crypto

    Vitalik Buterin reserves for Sam Altman's global project

    June 28, 2025

    Calci will close a $185 million round as rival Polymeruk reportedly seeks $200 million

    June 25, 2025

    Stablecoin Evangelist: Katie Haun's Battle of Digital Dollars

    June 22, 2025

    Hackers steal and destroy millions of Iran's biggest crypto exchanges

    June 18, 2025

    Unique, a new social media app

    June 17, 2025
  • Security

    Jack Dorsey says his “safe” new bitchat app hasn't been tested for security

    July 9, 2025

    Get the exhibition tables on TechCrunch Confuse 2025

    July 9, 2025

    How to protect your mobile number from SIM swap attacks

    July 9, 2025

    The US government has confirmed Covid research and arrests of Chinese citizens accused of stealing mass hacking email servers

    July 8, 2025

    After PC player was hacked, Activision defeated the Call of Duty game, sources say

    July 8, 2025
  • Startups

    7 days left: Founders and VCs save over $300 on all stage passes

    March 24, 2025

    AI chip startup Furiosaai reportedly rejecting $800 million acquisition offer from Meta

    March 24, 2025

    20 Hottest Open Source Startups of 2024

    March 22, 2025

    Andrill may build a weapons factory in the UK

    March 21, 2025

    Startup Weekly: Wiz bets paid off at M&A Rich Week

    March 21, 2025
  • TechCrunch

    OpenSea takes a long-term view with a focus on UX despite NFT sales remaining low

    February 8, 2024

    AI will save software companies' growth dreams

    February 8, 2024

    B2B and B2C are not about who buys, but how you sell

    February 5, 2024

    It's time for venture capital to break away from fast fashion

    February 3, 2024

    a16z's Chris Dixon believes it's time to focus on blockchain use cases rather than speculation

    February 2, 2024
  • Venture

    David George on the Future to be released in 2025

    July 9, 2025

    Edo Liberty explores missed links for Enterprise AI in 2025

    July 9, 2025

    Avoid the pitfalls that stall startup funding with TC at every stage

    July 9, 2025

    TC starts all stages in Boston, six days until the end of savings up to $475

    July 9, 2025

    European VCs break taboos by investing in pure defense technology from the Ukrainian war zone

    July 9, 2025
TechBrunchTechBrunch

Jack Dorsey says his “safe” new bitchat app hasn't been tested for security

TechBrunchBy TechBrunchJuly 9, 20253 Mins Read
Facebook Twitter Pinterest Telegram LinkedIn Tumblr WhatsApp Email
Share
Facebook Twitter LinkedIn Pinterest Telegram Email


On Sunday, Block CEO and Twitter co-founder Jack Dorsey launched an open source chat app called Bitchat, pledged to provide “safe” and “private” messaging without a centralized infrastructure.

Unlike traditional messaging apps that rely on the internet, this app relies on Bluetooth and end-to-end encryption. By being decentralized, Bitchat could become a secure app in a high-risk environment where the Internet is incapable of being monitored or accessed. According to Dorsey's white paper detailing app protocols and privacy mechanisms, Bitchat's system design “prioritizes” security.

However, given that the app and its code have not been reviewed or tested for security issues, the claim that the app is safe has already faced scrutiny by security researchers, given that it has not been reviewed or tested for security issues at all by Dorsey's own admission.

Since its launch, Dorsey has added warnings to Bitchat's GitHub page. “This software has not received external security reviews, may contain vulnerabilities and does not necessarily meet the stated security goals. It should not be used for production use.

This warning is currently also visible on Bitchat's main Github project page, but it was not at the time the app debuted.

As of Wednesday, Dorsey added:

This latest disclaimer comes after the researchers discovered that security researcher Alex Rodosia can be impersonated as someone else and make them think he is talking to a legitimate contact, as the researchers explained in a blog post.

Rodocea writes that Bitchat has an “Identity Authentication/Verification” system that allows attackers to intercept someone's “ID key” and “peer ID pair.” This is a digital handshake that is essentially supposed to use an app to establish a trustworthy connection between the two of you. Bitchat calls these “favorite” contacts and marks them with a star icon. The goal of this feature is to allow two Bitchat users to interact.

Dorsey did not respond to TechCrunch requests for comments sent to the block email address.

A screenshot showing an example of a chat where the attacker pretends to be “Bob” in a chat with “Alice.” (Image: Alex Rodosia)

On Monday, Radocea submitted a ticket to the GitHub project and asked how to report a security flaw it discovered on Bitter's favorite system. Shortly afterwards, Dorsey marked it “completed” without comment. (Dorsey reopened tickets on Wednesday, saying security issues can be reported by posting directly to GitHub.)

Another reported concern over Dorsey's claim that Bitchat has “Forward Screcy,” a encryption technology that ensures that even if an attacker steals or compromises the encryption key, it cannot decrypt messages that the attacker centres previously.

Someone pointed out a potential buffer overflow bug. This is a common type of security vulnerability that allows hackers to sweep the device's memory elsewhere and open the door to compromise data.

Radocea warned that Bitchat users shouldn't trust the app yet.

“Security is a great feature to get viral. But just like identity keys actually do encryption, basic sanity checks are very obvious to test when building something like this,” Radsea told TechCrunch. “There are people out there who can literally embrace security and rely on it for their safety, so that current state projects could put them at risk.”

Referring to his and others' findings, Radosia criticized Dorsey's warning that Vichat has not been tested for security.

“I would argue that I had an external security review, but it doesn't look good,” he said.



Source link

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

Get the exhibition tables on TechCrunch Confuse 2025

July 9, 2025

How to protect your mobile number from SIM swap attacks

July 9, 2025

The US government has confirmed Covid research and arrests of Chinese citizens accused of stealing mass hacking email servers

July 8, 2025

After PC player was hacked, Activision defeated the Call of Duty game, sources say

July 8, 2025

Marks & Spencer's Chair refuses to say whether retailers paid hackers after ransomware attack

July 8, 2025

Ingram Micro says the continuous outage caused by ransomware attacks

July 7, 2025

Leave A Reply Cancel Reply

Top Reviews
Editors Picks

7 days left: Founders and VCs save over $300 on all stage passes

March 24, 2025

AI chip startup Furiosaai reportedly rejecting $800 million acquisition offer from Meta

March 24, 2025

20 Hottest Open Source Startups of 2024

March 22, 2025

Andrill may build a weapons factory in the UK

March 21, 2025
About Us
About Us

Welcome to Tech Brunch, your go-to destination for cutting-edge insights, news, and analysis in the fields of Artificial Intelligence (AI), Cryptocurrency, Technology, and Startups. At Tech Brunch, we are passionate about exploring the latest trends, innovations, and developments shaping the future of these dynamic industries.

Our Picks

Jack Dorsey says his “safe” new bitchat app hasn't been tested for security

July 9, 2025

Hallucinations about soundslice on chatgpt music app frequently, founders have made to lie

July 9, 2025

David George on the Future to be released in 2025

July 9, 2025

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

© 2025 TechBrunch. Designed by TechBrunch.
  • Home
  • About Tech Brunch
  • Advertise with Tech Brunch
  • Contact us
  • DMCA Notice
  • Privacy Policy
  • Terms of Use

Type above and press Enter to search. Press Esc to cancel.