Skip to main content

Sunbird — the sketchy iMessage for Android app — just shut down

Sunbird messages app for Android
Nadeem Sarwar / Digital Trends

What was supposed to be an iMessage redeemer for Android smartphone users has quickly been consumed in a chaos of security and utter negligence. Merely days after the Nothing Chats app was removed from the Play Store, the tech at its foundation provided by Sunbird is also taking an unspecified leave, intensifying suspicions of something being seriously wrong.

Sunbird appeared on our radar late last year, promising blue bubbles for Android-to-iPhone messages. It also promised to bundle all messaging apps into a single cluster, somewhat like Beeper. Nothing adopted the Sunbird tech, bundled it into its own app for the Nothing Phone 2, and launched it with an ambitious video. “Sorry, Tim.” That’s the message Nothing CEO Carl Pei sent.

Recommended Videos

Bring on the blue bubbles.

We believe in windows, not walls. If messaging services are dividing phone users, then we want to break those barriers down.

So… we've developed iMessage compatibility for your Phone (2). pic.twitter.com/kArTGfXlQO

— Nothing (@nothing) November 14, 2023

Please enable Javascript to view this content

Over the weekend, I noticed that the Sunbird app’s Google Play Store listing returned a blank page. I originally thought it was unavailable due to some geographic restrictions. The company made no public announcement regarding the same, except notifying members in the Sunbird Discord channel.

“We have temporarily shut down the Sunbird app while we do a detailed security analysis,” the alert said, adding that the company will offer further details when it identifies the “exact occurrences.”

Interestingly, the revelation was first made in the dev-announcements channel of Sunbird’s Discord network. “In an abundance of caution and to protect your confidential data, we are shutting down Sunbird temporarily,” it said.

What I can’t wrap my head around is why it took a day to drop the same information in the public channel. And above all, why did Sunbird fail to make an announcement on its active Facebook and X (formerly Twitter) handles?

In a message that appeared today in the public Discord channel, Sunbird only said “lots going on” but didn’t provide any further technical details or progress on risk mitigations. “We have decided to pause Sunbird usage for now while we investigate security concerns,” says the message.

Digital Trends has reached out to Sunbird’s technical lead, Garin, for more information and will update this story as soon as they respond.

Sunbird only started notifying users via an in-app message. Earlier today, 9to5Google spotted in-app notifications from Sunbird users posted on Reddit, notifying them that the app was temporarily put on hold. It’s the same message that was first shared in the Discord community.

The security risks

The Nothing Chats splash page in the app.
Andy Boxall / Digital Trends

Security specialists at Texts found that the messaging app Nothing Chats was not employing HTTPS security protocols for its messages. Instead, it used the less secure HTTP standard, transmitting messages in unencrypted, plain text. If history has taught us anything about digital security, plain text is bad news.

A separate investigation revealed that all types of communication through Nothing Chats — including text, images, and other media — were sent in this unsecured, easily visible format. Additionally, it was uncovered that all messages sent and stored on Nothing Chats were unencrypted and hosted on a readily accessible Firebase platform.

Further findings showed that after users authenticate using JSON Web Tokens (JWT), which are not secure during transmission, they gain access to Nothing Chat’s Firebase database. This access allows them to view other users’ messages and files, which are sent and stored in real time and in plain text.

Nothing Chats on a Nothing Phone 2 compared with iMessage on an iPhone 15 Pro Max.
iMessage on an iPhone 15 Pro Max (left) and Nothing Chats on a Nothing Phone 2 Andy Boxall / Digital Trends

All of this rings giant security alarms about the Sunbird (and the Nothings Chats) app. It’s especially worrying when it asks for your Apple ID credentials, the magic token that links everything from your emails and personal photos to your banking details.

It would be interesting to see where Nothing and Sunbird go from here. But with Apple embracing RCS and filling the feature gulf for Android-iPhone messaging, I don’t think it would be worth risking your privacy and data security for a hack that gives you blue chat bubbles.

Nadeem Sarwar
Nadeem is a tech journalist who started reading about cool smartphone tech out of curiosity and soon started writing…
RCS messages are about to look a little different on your Android phone
Google Messages app on a Pixel 8 Pro, showing an RCS Chat message thread.

You might soon see a change in how your messages look on your Android phone. Google Messages is rolling out a change to how the type of message is displayed. At present, it says either "Text message" or "RCS message" at the bottom, but the new change will shorten these to either (Text) or (RCS).

9to5Google's Abner Li reports the change and points out that the phrasing could be reduced to either Text or RCS to streamline the appearance and make it look less technical. That said, only a limited number of people have reported the change so far. Google has a tendency to roll updates out slowly, however, so that's not surprising.

Read more
One of my favorite iPhone apps is finally coming to Android
The Arc Search app, showing a search result for how to peel an apple.

Good news, Android users! One of the best iOS apps released this year is finally coming soon to Android.

The app in question is Arc Search. Created by the same company behind the Arc Browser web browser for Mac and Windows, Arc Search is a mobile browser that strongly emphasizes straightforward, simple browsing — with a nice pinch of AI on top.

Read more
6 features that iOS 18 stole from Android
An iPhone home screen with iOS 18.

Apple took to the stage in an all-singing, all-dancing presentation at WWDC 2024 to unveil iOS 18, the latest software upgrade for the iPhone. Apple Intelligence may be the headline act that's stolen all the coverage, but iOS 18 will also introduce a boatload of smaller changes that can't simply be forgotten. Once you upgrade to iOS 18, you'll get more customization options, icon theming, a game mode, and more.

Really, Apple fans have never had it so good. But if that seems familiar to some of you, well, it's because iOS is becoming more and more like Android. To Android fans like me, the irony is so, so sweet. Apple fans, enjoy your new and awesome features that have been very obviously cribbed from Android.

Read more