Messaging app JusTalk is spilling millions of unencrypted messages

Messaging app JusTalk claims to be secure and encrypted. Huge cache of users' unencrypted private messages found online. Review of internal data shows the app does not provide end-to-end encryption. Security researcher Anurag Sen found the data and asked TechCrunch for help in reporting it to company. The internal JusTalk chat app data contains the granular locations of thousands of users collected from users' phones. Each message recorded in the data contained every phone number in the same chat, it was possible to follow entire conversations. This is the latest in a spate of data spills in China. Source and details :