A new app called iMessage Chat has hit the Play Store that brings iMessage – Apple’s free messaging service to Android devices. However, please stay away as the app hasn’t been developed by Apple. The worrying aspect of the app is that, it is not just a rip off of Apple’s iMessage service, but it also allows Android users to use iMessage using their Apple ID, which raises serious security issues. Jay Freeman aka saurik, founder of Cydia, the unofficial App Store for jailbreak iOS devices provides some insight of how the app works on his Google+ page: pod2g, a famous hacker from the iOS jailbreaking world has also warned users from using the app: Every packet from Apple is forwarded to 222.77.191.206, which then sends back exactly what data to send to Apple (along with extra packets that I presume tell the client what’s happening so it can update its UI). Likewise, if the client wants to send a message, it first talks to the third-party server, which returns what needs to be sent to Apple. The data is re-encrypted as part of this process, but its size is deterministically unaffected.
— pod2g (@pod2g) September 24, 2013
— pod2g (@pod2g) September 24, 2013 If you’re really curious to find out how it works, then just watch this video:
Let’s hope Google quickly removes this app from the Play Store, before login details of more users is compromised. It is highly unlikely that Apple will ever release an Android app for its iMessage service, so if you see another iMessage app in the Play Store, the golden rule would be to avoid it.
