Security

Kibo iOS App Lets You Hide Messages In Your Messages

Comment

Image Credits:

Just when you thought the wonderful world of digital messaging couldn’t get any more rich and layered, along comes another app to prove there are more ideas in the digital sphere than can be contained within the average web user’s philosophy… Just don’t call Kibo a messaging app. It is in fact an iOS keyboard app for sending hidden messages within other messaging apps’ messages — be that WhatsApp or iMessage or Facebook or whatever.

Why would you want to do that? Perhaps your parents or siblings are snooping around on your phone. Or you’re worried about message notifications flashing up on your lock screen and being read by the prying eyes of colleagues or your S.O. Or you want to make your friends have to download another app just to read the beer emoji you’re sending them… But it’s probably most useful as an added privacy layer — like an anti-shoulder surfing screen protector for your messaging activity.

“Kibo solves the problem of users’ privacy protection when exchanging messages containing any secrets or private information,” is how the co-founders explain their mission. “People commonly believe that no-one can intercept their private messaging; however, their very personal messages are often seen by their friends, colleagues, and passers-by. So, we are aiming to provide a means of sending and receiving messages in a way that no-one except the sender and the recipient will be able to see and read them.”

Kibo is obviously not the first app to offer some clandestine messaging privacy theatrics to entice smartphone users. Snapchat sparked the rush to ephemeral messaging with its self-destructing picture messages which required users press and hold to view. There’s also Confide which plays around with message visibility to deter screenshotting and shoulder surfing. But Kibo is a little different, given it can straddle different message apps because it lives inside the keyboard. (Apple made such things possible in iOS by opening up third party access to the system-wide keyboard last year.)

Still, as with (most) messaging apps, Kibo requires both recipients have the app installed (and that they have afforded system-wide access via the iOS keyboard setting) in order to view the secret messages. Kibo’s privacy policy can be read here; the team claims it is not receiving, storing or transmitting any sensitive data — a key consideration for users when installing any third-party keyboard app. For non-iOS users, an Android version is slated as ‘coming soon’.

So how does Kibo’s secret message feature work? At this early stage it’s a bit clunky. The keyboard looks much like the stock iOS keyboard, except for a little padlock key located next to the space bar. To send a secret message the user types their message text, then taps on the padlock (at which point the graphic changes to an unlocked padlock), then they tap ‘send’ to send whatever text they entered as their secret missive — but now it’s been cunningly disguised as random text chat, such as ‘Is there a problem?’ or ‘I agree. Let’s shake on it’.

The message coding and sending process is rather opaque at this early stage. And can be pretty confusing because there’s no feedback to confirm whether a message has been correctly coded or not. Providing a better user interface to make this process clearer is something the team should stick at the top of their to-do list.

If you don’t follow the correct coding process you’ll just send a plain uncoded text message… oops! The process is confused by the fact that your secret text changes into the coded text when you tap the padlock. But repeat tapping the padlock apparently cycles through other stock secret messages (as well as prior ones, if you’ve typed others) so it’s not always clear whether you have correctly coded the text or not.

I was able to receive coded messages correctly via Kibo, but managed to send what I thought was a coded secret as a plain text message — so some care is needed.

To view a secret missive (when it has been sent correctly), the recipient presses on the fake text, as if they were going to copy and paste it, and taps ‘copy’ — at which point the secret message (if there is one) is displayed below, overlaid over the Kibo keyboard.

The app also does not make it clear when there is a secret embedded in a particular message. If it did, that wouldn’t be so very secret, although the disjointed conversation is a pretty big clue. It’s basically the digital equivalent of passing coded notes in class — or it is, when it works.

Kibo claims it is encrypting the secret messages it conveys (using symmetric encryption algorithm DES), so says it has no access to the text that’s stored encrypted on its servers, saying only the sender and the recipient are able to read the unencrypted messages.

How did they come up with the idea of hiding messages within messages — which remains a neat idea, even though the app clearly needs some UI work at this early stage… After “an iPhone spoiled a birthday surprise which was prepared by 15 people”, is how they tell it.

“This prompted us to think about the forced transparency in the digital age,” they write. “However, the idea to make another ‘safe’ messenger was considered to be short-sighted, and we decided to make a private cross-messenger add-in for all types of communications. After exploring the iOS capabilities, we have implemented a product based on an iOS external keyboard.”

They argue Kibo complements, rather than competes with secure messaging apps like Wickr and Telegram — since it’s not a “private messenger” itself — and “can be used in any messenger, even in an insecure one, allowing the users to exchange their messages in a private and secure manner”.

Who’s behind Kibo’s coded facade? The team self describes as “not a traditional startup” — preferring to be considered “a small community of innovators working together toward a common goal of protecting mobile users’ privacy”. The two co-founders of the five-strong “community” are Vitaly Halenchyk and Krill Davydov. Currently based in the U.S. they are planning to relocate to Europe.

Prior to working on Kibo, which they started this April — launching the app about a week ago (and garnering more than 10,000 users at this nascent stage) — they were involved with organizing education events and lectures for young entrepreneurs.

They’ve mostly been bootstrapping Kibo’s development but do have an investor helping with costs and resources, although they’re not disclosing who it is at this stage. “We took a small amount for development and nowadays all the operations are conducted under the umbrella of our investor’s company,” they tell TechCrunch, adding: “Recently, we have been issued a provisional patent application and will soon be ready for the investment rounds.”

For all their talk of not being a “traditional startup”, they are formulating a business plan for Kibo. It’s a free download but the plan is to monetize by introducing additional paid features and add-ons down the line. “Functionality of text hiding is free and will remain free in the future. However, we are going to introduce new paid features and add-ons, but it is too early to talk about it,” they note.

It is indeed early for Kibo. But it’s a nice idea — just one that needs a little more UI polish to really shine.

More TechCrunch

ZeroPoint claims to have solved compression problems with hyper-fast, low-level memory compression that requires no real changes to the rest of the computing system.

ZeroPoint’s nanosecond-scale memory compression could tame power-hungry AI infrastructure

In 2021, Roi Ravhon, Asaf Liveanu and Yizhar Gilboa came together to found Finout, an enterprise-focused toolset to help manage and optimize cloud costs. (We covered the company’s launch out…

Finout lands cash to grow its cloud spend management platform

On the heels of raising $102 million earlier this year, Bugcrowd is making good on its promise to use some of that funding to make acquisitions to strengthen its security…

Bugcrowd, the crowdsourced white-hat hacker platform, acquires Informer to ramp up its security chops

Google is preparing to build what will be the first subsea fibre optic cable connecting the continents of Africa and Australia. The news comes as the major cloud hyperscalers battle…

Google to build first subsea fibre optic cable connecting Africa with Australia

The Kia EV3 — the new all-electric compact SUV revealed Thursday — illustrates a growing appetite among global automakers to bring generative AI into their vehicles.  The automaker said the…

The new Kia EV3 will have an AI assistant with ChatGPT DNA

Bing, Microsoft’s search engine, isn’t working properly right now. At first, we noticed it wasn’t possible to perform a web search at all. Now it seems search results are loading…

Bing’s API is down, taking Microsoft Copilot, DuckDuckGo and ChatGPT’s web search feature down too

If you thought autonomous driving was just for cars, think again. The so-called ‘autonomous navigation’ market — where ships steer themselves guided by AI, resulting in fuel and time savings…

Autonomous shipping startup Orca AI tops up with $23M led by OCV Partners and MizMaa Ventures

The best known mycoprotein is probably Quorn, a meat substitute that’s fast approaching its 40th birthday. But Finnish biotech startup Enifer is cooking up something even older: Its proprietary single-cell…

Meet the Finnish biotech startup bringing a long lost mycoprotein to your plate

Silo, a Bay Area food supply chain startup, has hit a rough patch. TechCrunch has learned that the company on Tuesday laid off roughly 30% of its staff, or north…

Food supply chain software maker Silo lays off ~30% of staff amid M&A discussions

Featured Article

Meta’s new AI council is composed entirely of white men

Meanwhile, women and people of color are disproportionately impacted by irresponsible AI.

15 hours ago
Meta’s new AI council is composed entirely of white men

If you’ve ever wanted to apply to Y Combinator, here’s some inside scoop on how the iconic accelerator goes about choosing companies.

Garry Tan has revealed his ‘secret sauce’ for getting into Y Combinator

Indian ride-hailing startup BluSmart has started operating in Dubai, TechCrunch has exclusively learned and confirmed with its executive. The move to Dubai, which has been rumored for months, could help…

India’s BluSmart is testing its ride-hailing service in Dubai

Under the envisioned framework, both candidate and issue ads would be required to include an on-air and filed disclosure that AI-generated content was used.

FCC proposes all AI-generated content in political ads must be disclosed

Want to make a founder’s day, week, month, and possibly career? Refer them to Startup Battlefield 200 at Disrupt 2024! Applications close June 10 at 11:59 p.m. PT. TechCrunch’s Startup…

Refer a founder to Startup Battlefield 200 at Disrupt 2024

Social networking startup and X competitor Bluesky is officially launching DMs (direct messages), the company announced on Wednesday. Later, Bluesky plans to “fully support end-to-end encrypted messaging down the line,”…

Bluesky now has DMs

The perception in Silicon Valley is that every investor would love to be in business with Peter Thiel. But the venture capital fundraising environment has become so difficult that even…

Peter Thiel-founded Valar Ventures raised a $300 million fund, half the size of its last one

Featured Article

Spyware found on US hotel check-in computers

Several hotel check-in computers are running a remote access app, which is leaking screenshots of guest information to the internet.

18 hours ago
Spyware found on US hotel check-in computers

Gavet has had a rocky tenure at Techstars and her leadership was the subject of much controversy.

Techstars CEO Maëlle Gavet is out

The struggle isn’t universal, however.

Connected fitness is adrift post-pandemic

Featured Article

A comprehensive list of 2024 tech layoffs

The tech layoff wave is still going strong in 2024. Following significant workforce reductions in 2022 and 2023, this year has already seen 60,000 job cuts across 254 companies, according to independent layoffs tracker Layoffs.fyi. Companies like Tesla, Amazon, Google, TikTok, Snap and Microsoft have conducted sizable layoffs in the first months of 2024. Smaller-sized…

20 hours ago
A comprehensive list of 2024 tech layoffs

HoundDog actually looks at the code a developer is writing, using both traditional pattern matching and large language models to find potential issues.

HoundDog.ai helps developers prevent personal information from leaking

The changes are designed to enhance the consumer experience of using Google Pay and make it a more competitive option against other payment methods.

Google Pay will now display card perks, BNPL options and more

Few figures in the tech industry have earned the storied reputation of Vinod Khosla, founder and partner at Khosla Ventures. For over 40 years, he has been at the center…

Vinod Khosla is coming to Disrupt to discuss how AI might change the future

AI has already started replacing voice agents’ jobs. Now, companies are exploring ways to replace the existing computer-generated voice models with synthetic versions of human voices. Truecaller, the widely known…

Truecaller partners with Microsoft to let its AI respond to calls in your own voice

Meta is updating its Ray-Ban smart glasses with new hands-free functionality, the company announced on Wednesday. Most notably, users can now share an image from their smart glasses directly to…

Meta’s Ray-Ban smart glasses now let you share images directly to your Instagram Story

Spotify launched its own font, the company announced on Wednesday. The music streaming service hopes that its new typeface, “Spotify Mix,” will help Spotify distinguish its own unique visual identity. …

Why Spotify is launching its own font, Spotify Mix

In 2008, Marty Kagan, who’d previously worked at Cisco and Akamai, co-founded Cedexis, a (now-Cisco-owned) firm developing observability tech for content delivery networks. Fellow Cisco veteran Hasan Alayli joined Kagan…

Hydrolix seeks to make storing log data faster and cheaper

A dodgy email containing a link that looks “legit” but is actually malicious remains one of the most dangerous, yet successful, tricks in a cybercriminal’s handbook. Now, an AI startup…

Bolster, creator of the CheckPhish phishing tracker, raises $14M led by Microsoft’s M12

If you’ve been looking forward to seeing Boeing’s Starliner capsule carry two astronauts to the International Space Station for the first time, you’ll have to wait a bit longer. The…

Boeing, NASA indefinitely delay crewed Starliner launch