Hacker News new | ask | show | jobs
by jtolj 3961 days ago
I was excited about this for a moment, since I was a big fan of Pushbullet before they decided to "evolve" into a messaging app.

I used it simply to send links between my phone/browser and to occasionally send a link via SMS. I would have happily paid for this functionality.

In a recent update, it became impossible to send SMS from the browser without also syncing your entire SMS history (images included) to their server without end-to-end encryption, so I nuked my account.

I just signed up again to test this out, and I didn't get very far before I realized they are still storing all my MMS images on their server un-encrypted.

Here's one from my SMS history: https://dl.pushbulletusercontent.com/KWevdTT0b4Fe92yukWHDKlo...

I just "cleared my history" and deleted my account and the link still works, so we'll have to see how long my data stays on their server. I'm going to assume indefinitely :(.

1 comments

Note that when a service says "we have now enabled [feature X] for ... SMS", without also explicitly specifying MMS, then they probably haven't done MMS.

Although SMS and MMS are presented similarly on devices, they're actually two wildly separate technologies and that difference usually bubbles up into how gateways handle them, translating to "update SMS handling" and "update MMS handling" usually being relegated to two different sprints.

Seems like semantics, since MMS are synced by turning on "SMS Sync" in their app. I'm fairly technologically savvy, and I made the assumption anything going through the "SMS Sync" would be encrypted.

I got burnt by that and now all of the photos in my MMS, including some that the people who sent would prefer not ever be public, are unencrypted on a server somewhere... probably in perpetuity.

That's on me, I took the risk... just wanted to inform others.

I definitely won't be trying PB again.