What is RCS and How can it change messaging on Android? - TechPP

What is RCS and How can it change messaging on Android? - TechPP
WhatsApp sues Israeli security firm for injecting malware into targets' phones through its app - The Next Web
Google Android users getting their own version of iMessage today – but it’s vulnerable to hackers - The Sun

Posted: 18 Nov 2019 10:30 PM PST

While Android claims to hold numerous advantages over iOS, one of the traits in which it trails iOS is messaging. The default message service on Android lacks in various aspects and is far-fetched from Apple's iMessage. Over the years, Google has made several attempts to come up with a service that offers as many functionalities as iMessage, but unfortunately, has failed to do so. However, that is expected to change with Google's implementation of RCS (Rich Communication Services) on its messaging platform.

So what is RCS, and how can it change messaging on Android? Let us explain!

What is RCS and how does it work?

RCS (Rich Communication Services) is a communication protocol between phones and carriers that aims to replace the old conventional SMS (Short Message Service) and MMS (Multimedia Messaging Service) services with a more interactive messaging experience. The idea behind replacing SMS and MMS with RCS is to make the messaging experience on Android on par with the modern standards, which allow users to enjoy a rich messaging experience, much like Apple's iMessage or some of the popular internet-based messaging services like WhatsApp and Facebook Messenger.

With RCS, users get to enjoy rich-text conversations similar to other messaging services like iMessage and WhatsApp. It provides features such as typing indicator, bigger groups, immersive conversations, multimedia support, video calling, no limits on characters, etc, to improve the overall messaging experience. Basically, with RCS, the messages can carry more information (in different forms) than a regular massage.

Unlike standard SMS messaging, RCS uses an active internet connection, be it via mobile data or Wi-Fi, to use the service to send and receive messages. When a user sends a message using the Messages app (with RCS enabled), and the person on the receiving end also has RCS enabled on their device, they both get to enjoy the benefits of RCS. On the contrary, if the person at the receiving end does not have RCS enabled or they have an unsupported phone/carrier, the message would still be sent across to the receiver. However, it would be a regular SMS message and not backed by RCS.

RCS — a brief history

RCS was first announced in 2007 as Rich Communication Suite to offer inter-operator communication possible using the IMS (IP Multimedia Subsystem) technology. And then, a year later, in 2008, it was taken over by the GSM Association (Global System for Mobile Communications). [General trivia: the GSMA is the same organization that carries out the MWC (Mobile World Congress) — the largest annual mobile exhibition and conference — every year.] Three years later, the organization came up with a new specification, called RCS-e (RCS-enhanced). RCS-e had different iterations of RCS with the motive to offer a much better and interactive platform that would no longer have the monotonous chat experience.

A few years down the road, in the year 2016, GSMA published the Universal Profile — a single GSMA specification for advanced communications — intending to provoke mobile manufacturers and carriers to start the adoption and implementation of RCS protocol on their products and services. In the same year, Google went on to introduce two new services — Duo (video chat app) and Allo (instant messaging app), for both Android and iOS — as another attempt at fixing the ever-straggling messaging service on Android. However, much like its previous attempts, this attempt also failed to achieve the company's motive, and therefore, in 2018, Allo was denied support going further.

The very same year, Google announced that it is transferring employees working on Allo to work towards a carrier-based wider implementation of RCS, under the branding, Chat. Finally, in June, earlier this year, Google announced that it would start deploying RCS on its Messages app via an opt-in basis.

How is RCS different from SMS/MMS?

When compared with SMS or MMS, there is a wide range of improvements and add-ons that separate RCS from the other two services. Among these, the most crucial one, which also happens to be the biggest differentiators, is the rich-text conversation, which offers a bunch of nifty features such as read receipts, typing indicator, high-quality multimedia support, no restriction on character limit, among a few other. With these features, users can have more interactive and organized conversations, perform video calls, chat with no limit on characters, have bigger groups, and get better and organized conversation and engagement, all without requiring the need to download any third-party app separately. In simpler terms, RCS on Messages aims to make the messaging experience on Android much like iMessage.

How is RCS different from iMessage?

Even though RCS appears to be a lot like iMessage and the two share a lot of common features, they are not exactly the same. For starters, unlike iMessage, which provides the option to create a profile (with a name and photo) to share with others, Google does not seem to have any plans on introducing a similar functionality with RCS.

Video calling is another aspect in which the two services seem to differ. As with RCS, in addition to a bunch of nifty features and rich-text conversations, Google also plans to introduce video calling with the Messages app to make all the features available in a single app. On the contrary, iMessage only allows chats, and therefore, requires a separate app, called FaceTime, to make video calls.

Unlike iMessage, which uses an email address and therefore allows users to access messages across multiple devices, RCS relies on your phone number much like regular SMS, and therefore, does not offer the flexibility to view RCS messages across multiple devices.

Another major difference between the two services, which some regard as a drawback with RCS, is security. iMessage or other internet-based messaging services like WhatsApp, Signal, or Messenger, provide end-to-end (E2E) encryption on their platform to secure users' conversations. End-to-end encryption ensures that a message sent across by a sender is encrypted and can only be read (decrypted) by the intended receiver. With E2E, under no circumstances can the message be read or intercepted by a third-party. In contrast, RCS does not offer E2E encryption as it is more like a carrier-based messaging service and therefore is subject to lawful intercepts by the government under certain situations. It is because of this reason that, despite the GSMA wanting to use E2E encryption on RCS, in no way does it seem plausible.

However, to offer some level of protection on the platform and secure users' conversations to a certain degree, Google has upgraded some of the protocols on RCS. In addition to these upgrades and the protections offered by the Universal Profile standards, RCS also incorporates TLS (Transport Layer Security) — to secure communication between the service and the server, and IPsec — to ensure proper working of connection-related tasks and protect the flow of data over IP (Internet Protocol).

What is the current status of RCS?

A few days back, Google announced that it is rolling out RCS for users in the US, irrespective of what phone or carrier they are using it on. It also did something similar back in June this year, when it introduced RCS in the UK and France.

[embedded content]

But before Google planned to release RCS in the US, it was relying largely on carriers to adopt the Universal Profile and start rolling out RCS to their customers. However, the carriers came up with CCMI (Cross-Carrier Messaging Initiative) — a joint venture that promised to ship a new messaging app and rollout RCS services in 2020. And this lead Google take matters in its hands and roll out RCS in the US in much the same way as it did in the UK and France, wherein, instead of relying on carriers' servers, Google is allowing the service to use its own servers to enable RCS chat rather than waiting for the carriers to speed up the process at their end. And when the carriers finally start rolling out RCS, the existing users would then be moved to their carriers' servers.

If you wish to use RCS now, you need to download Google's Messages app from the Play Store. After which you must set it as the default messaging app on your phone. Now, if Google has rolled out RCS in your country, you can enable it from the settings on the Messages app. However, in case RCS is not available in your region, you can follow our in-depth video tutorial to enable RCS on any Android phone. And once that is done, you can enjoy RCS messaging on your phone.

WhatsApp sues Israeli security firm for injecting malware into targets' phones through its app - The Next Web

Posted: 30 Oct 2019 12:00 AM PDT

WhatsApp just sued Israel-based security company, the NSO Group, in a US federal court for allegedly injecting malware into over 1,400 targets' phones through the messaging service.

The Facebook-owned company accused the NSO Group of installing malware into phones for surveillance. The court filing says the security company wasn't able to break WhatsApp's end-to-end encryption, so it used malicious code to snoop on chat messages.

In May, the chat app patched a vulnerability that allowed hackers to install malware through an audio call even if you don't answer it. At the time, sources told the Financial Times that NSO Group was responsible for this exploit.

In a column posted in Washington Post after the lawsuit, the company head Will Cathcart said NSO Group targeted "at least 100 human-rights defenders, journalists and other members of civil society across the world."

The Israel-based security group has been notoriously accused of supplying snooping tools to governments. WhatsApp's court filing alleges the security company says its Pegasus software "could remotely and covertly extract valuable information from virtually any mobile device."

NSO Group has been involved in human rights issues as well. Last year, Jamal Khashoggi, a journalist, was tortured and murdered by Saudi Arabia inside the country's consulate in Istanbul. Gizmodo notes the company's spyware was found on one of the Khashoggi's contact's phone.

According to a report by Motherboard, the group has been trying to clean up its image with select interviews and Google ads.

However, in an email statement to TNW, the firm said it disputes WhatsApp's allegations strongly and said it takes action against any misuse of its service:

In the strongest possible terms, we dispute today's allegations and will vigorously fight them. The sole purpose of NSO is to provide technology to licensed government intelligence and law enforcement agencies to help them fight terrorism and serious crime. Our technology is not designed or licensed for use against human rights activists and journalists. It has helped to save thousands of lives over recent years.

The truth is that strongly encrypted platforms are often used by pedophile rings, drug kingpins and terrorists to shield their criminal activity. Without sophisticated technologies, the law enforcement agencies meant to keep us all safe face insurmountable hurdles. NSO's technologies provide proportionate, lawful solutions to this issue.

We consider any other use of our products than to prevent serious crime and terrorism a misuse, which is contractually prohibited. We take action if we detect any misuse. This technology is rooted in the protection of human rights – including the right to life, security and bodily integrity – and that's why we have sought alignment with the U.N. Guiding Principles on Business and Human Rights, to make sure our products are respecting all fundamental human rights."

Almost every communications software company like WhatsApp is facing pressure from governments across the world to install a backdoor to let them trace messages for security purposes. However, if there's a backdoor in services with end-to-end encryption, there's a strong possibility of it being exploited by governments for snooping and censorship and by bad actors to steal information.

Authorities across the globe must understand this threat, and stop encouraging tools that can be used for mass surveillance.

Google Android users getting their own version of iMessage today – but it’s vulnerable to hackers - The Sun

Posted: 15 Nov 2019 09:02 AM PST

GOOGLE has rolled out its new messaging service to all its US Android users today.

Like Apple's iMessage, the tool is a hefty upgrade to standard text messaging that shows you read receipts and lets you see when contacts are typing.

The Android chat service looks like thisCredit: Google

This service is already available in the UK and was rolled out to existing devices through an update.

Essentially, the tool – which relies Rich Communication Services (RCS) – is a bit like WhatsApp, but will come pre-loaded on all future Android phones.

It lets you ping your mates high-quality photos with ease.

The one drawback is that Google has skimped on data protection for now.

Android phones are getting a rival version of iMessage (stock)Credit: Alamy

Whereas iMessages are end-to-end encrypted – meaning the contents of your chats are scrambled to block out outsiders – Android's chats won't be to start with.

That means hackers could break into your phone and read the messages, or that governments could request and access your data.

So if you're even partially concerned about privacy, you're probably better off sticking with WhatsApp on Android.

For the uninitiated, RCS is a messaging standard that will allow for free chats between Android users on different mobile networks.

The way it works is straightforward: You send a text through the Messages app on your Android phone and a user on a compatible network will receive it as a Chat free of charge over Wi-Fi.

It'll eat in to your data allowance if sent over 4G, and will be sent as a regular SMS to those who don't have Chat enabled – including iPhone users.

What is end-to-end encryption?

It's available by default on WhatsApp, but how does the privacy feature work?

Encryption stops unauthorised access to your data, from emails to WhatsApp chats, by locking down communication between the parties involved.
This is done by "scrambling" the messages sent from one person to another into a code that looks like gibberish to anyone else.
Only you and the recipient can decrypt the jumbled-up content into a readable condition, which is done using unique "keys" granted to the users involved.
WhatsApp, Signal and Telegram all enable end-to-end encryption by deafult
While Facebook Messenger gives you the option to manually turn it on for individual conversations.

In other news, the retro flip phone is back with a bang after Motorola unveiled a revamped version of its iconic Razr handset.

WhatsApp 'dark mode' that makes it easier to text at night is finally coming to iPhone.

And, check out this iPhone XR deal with 75GB data at just £36 per month with no upfront cost.

What do you make of the Android Messages app update? Let us know in the comments...

We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at tech@the-sun.co.uk

Search This Blog

Android Full Encryption