Jack Dorsey's Decentralized Chat App, Bitchat, Raises Security Concerns

Jack Dorsey's open-source chat app, Bitchat, promises secure, peer-to-peer encrypted messaging without a centralized infrastructure. However, security researchers have uncovered flaws in its identity verification system, allowing attackers to impersonate users. Dorsey has added a warning to GitHub, admitting the app lacks external security review and contains vulnerabilities, advising against production use. Researchers have identified vulnerabilities including identity spoofing and potential buffer overflow bugs, raising serious concerns about the app's security.