This is insane: TeleGuard, a 'secure' chat app downloaded more than a million times, uploads users' private keys, meaning the company can decrypt messages. And anyone can get anyone else's private key by just sending the user ID to the API. Possibly worst ever https://www.404media.co/a-secure-chat-apps-encryption-is-so-bad-it-is-meaningless/
A Secure Chat App’s Encryption Is So Bad It Is ‘Meaningless’

TeleGuard is an app downloaded more a million times that markets itself as a secure way to chat. The app uploads users’ private keys to the company’s server, and makes decryption of messages trivial.

404 Media
@josephcox this is so insane it almost feels like a honeypot setup by the police.

@DavidNielsen @josephcox

As someone who looked at teleGuard and ALWAYS assumed honeypot. This fucking tracks.

@josephcox who wants to bet the words "vibe" and "coded" were involved?
@josephcox Let me guess. It was vibe coded, right?
@Sempf @josephcox It launched in 2021, so perhaps a bit too soon for that.

@stiiin @josephcox You are probably right.

That said, I cut code using OpenAI in 2021 with the API, and it worked but was bad enough that I still stand by what I said. Or maybe it was old fashioned bad architecture - that is more likely.

@josephcox That has to be a honey pot. It has to be. It is so bad nobody would ever....

@agowa338 @josephcox People paid large amounts of money for EncroChat, which was a honeypot.

These were drug dealers with some street smarts, who had experience of IRL stings and rip offs.

They would have been much better off to get a TracFone at Walmart and load up Signal.

Signal has repeatedly shown its empty pockets in response to court orders.

@mike805 @josephcox

Oh right EncroChat was the name of that other honeypot I was thinking about.