Dex 🔞

@Dex

Big hearted fluffdragon...

they/it/she
dexthedragon.co.uk/

...fictional ex-90s platformer mascot, nerd, plural, ΘΔ.

Masto 🐘

scalie.club/@Dex

Bluesky

bsky.app/profile/dex.nullpat.ch

Dex 🔞@Dex5/14/2023, 10:02 AM

Lupi @lupi

@lexi5/11/2023, 3:40 PM

this is one of those articles where you think you've hit rock bottom and it just keeps and keeps on getting worse

crnkovic.dev
Testing a new encrypted messaging app's extraordinary claims
How I breached a nonexistent database and found every private key in a 'state-of-the-art' encrypted messenger.
https://crnkovic.dev/testing-converso/ (archived)

#also i wonder if someone will notice the weird thing about this chost #(tagging it like this will make the chance 100%)

Wobblegong @wobblegong5/11/2023, 10:02 PM

How the article started:

How the article is going: The caption for a screenshot that is, in its entiretly, the words "oh no"

#rubbernecking the trainwreck #sometimes people making astonishing claims... are lying #the database thing left me speechless though #"security" as done by someone who wouldn't put a password on the wifi

Lupi @lupi5/14/2023, 9:56 AM

oh that's a fun update

"2023-05-11: The founder of Converso, Tanner Haas, tells me that he and his 'legal team' have a problem with my article, and recommends I remove it. He begins sending me a series of emails, accusing me of defamation and slander, and alleging that I am "either an employee [of Signal] or Moxie himself." Meanwhile, Converso begins removing content from its website and marketing materials, including most of the false or misleading statements quoted in this article."

normal good behavior always.

i always sorta keep "never trust a tech company with an ad spend budget" as a personal rule and as soon as it opened with the writer learning they existed through an ad spot on a podcast, I Had A Feeling.

You must log in to comment.

in reply to @lexi's post:

Kay @kaybee5/11/2023, 3:52 PM

YIKES

Sarah @catgirlcock5/11/2023, 3:53 PM

military grade security

Obspogon @obspogon5/11/2023, 3:58 PM

i have a userscript that lets me see the source code of cohost posts and I see what you did there

@lexi5/11/2023, 5:25 PM

it was only a matter of time. i did that because iframely thought it would be a good idea to include one of the last images, showing leaked data, as a thumbnail, which would've spoiled a bit. also, it was 100% handwritten because why not.

@garak5/11/2023, 4:02 PM

a different website by Converso's creator, offering SEO marketing services

In retrospect, perhaps there were warning signs.

Ξ @exerian5/11/2023, 6:35 PM

it's about like the time that ExpressVPN hired a new CEO whose previous job was CEO of a company that produced malware. anyway, ExpressVPN will def sell your data to the highest bidder and then turn around and also sell it to the lowest bidder.

Just Another Apocryphal Mess @apocryphalmess5/11/2023, 4:28 PM

was reloading my cohost tab to come post this. amazing that this just keeps happening

Kran'ts Ton @sudo-EatPant5/11/2023, 4:29 PM

Love at the bottom where (spoilers) they essentially said "yeah we closed off the database" instead of changing all the rest of the stuff wrong with the system. Also love that the first response was "how do we make it so nobody can decompile the apk"

Kran'ts Ton @sudo-EatPant5/11/2023, 4:46 PM

Actually no, they were like "wait how can you look at the code in our app? How did you do that" which is really confidence inspiring. Top security experts are definitely working at that company

ash @hierarchon5/11/2023, 7:36 PM

2023-05-05: Converso asks: "May we know what you do and where you are located? Thank you."

definitely not a thinly veiled legal threat

Kran'ts Ton @sudo-EatPant5/11/2023, 8:49 PM

"Haha thats crazy, what's your legal name and address? We'd love to send you some free converso swag"

rose @rosieposie5/11/2023, 11:58 PM

the first mistake is ever buying or using anything heard from a podcast ad read

jess @ratherforky5/12/2023, 1:52 AM

A relatively small thing compared to the rest of this disaster, but that injection vulnerability is so textbook it's comical

in reply to @lupi's post:

~@modulusshift5/14/2023, 12:43 PM

I say: Don’t believe there’s a competent legal team unless you see something on their letterhead. The first thing a lawyer would have told this prick is “let me handle communications”. The lawyer definitely didn’t sign off on “you work for Signal don’t you” lol

Nire Bryce @NireBryce5/14/2023, 1:08 PM

my "I'm not the NSA, my competitors are" shirt is raising a lot of questions already answered by my shirt

Deepshock @deepshock5/14/2023, 2:47 PM

You'd think that error handling would catch some of this at any step.

Pinned Tags