Security

Kibo iOS App Lets You Hide Messages In Your Messages

Comment

Image Credits:

Just when you thought the wonderful world of digital messaging couldn’t get any more rich and layered, along comes another app to prove there are more ideas in the digital sphere than can be contained within the average web user’s philosophy… Just don’t call Kibo a messaging app. It is in fact an iOS keyboard app for sending hidden messages within other messaging apps’ messages — be that WhatsApp or iMessage or Facebook or whatever.

Why would you want to do that? Perhaps your parents or siblings are snooping around on your phone. Or you’re worried about message notifications flashing up on your lock screen and being read by the prying eyes of colleagues or your S.O. Or you want to make your friends have to download another app just to read the beer emoji you’re sending them… But it’s probably most useful as an added privacy layer — like an anti-shoulder surfing screen protector for your messaging activity.

“Kibo solves the problem of users’ privacy protection when exchanging messages containing any secrets or private information,” is how the co-founders explain their mission. “People commonly believe that no-one can intercept their private messaging; however, their very personal messages are often seen by their friends, colleagues, and passers-by. So, we are aiming to provide a means of sending and receiving messages in a way that no-one except the sender and the recipient will be able to see and read them.”

Kibo is obviously not the first app to offer some clandestine messaging privacy theatrics to entice smartphone users. Snapchat sparked the rush to ephemeral messaging with its self-destructing picture messages which required users press and hold to view. There’s also Confide which plays around with message visibility to deter screenshotting and shoulder surfing. But Kibo is a little different, given it can straddle different message apps because it lives inside the keyboard. (Apple made such things possible in iOS by opening up third party access to the system-wide keyboard last year.)

Still, as with (most) messaging apps, Kibo requires both recipients have the app installed (and that they have afforded system-wide access via the iOS keyboard setting) in order to view the secret messages. Kibo’s privacy policy can be read here; the team claims it is not receiving, storing or transmitting any sensitive data — a key consideration for users when installing any third-party keyboard app. For non-iOS users, an Android version is slated as ‘coming soon’.

So how does Kibo’s secret message feature work? At this early stage it’s a bit clunky. The keyboard looks much like the stock iOS keyboard, except for a little padlock key located next to the space bar. To send a secret message the user types their message text, then taps on the padlock (at which point the graphic changes to an unlocked padlock), then they tap ‘send’ to send whatever text they entered as their secret missive — but now it’s been cunningly disguised as random text chat, such as ‘Is there a problem?’ or ‘I agree. Let’s shake on it’.

The message coding and sending process is rather opaque at this early stage. And can be pretty confusing because there’s no feedback to confirm whether a message has been correctly coded or not. Providing a better user interface to make this process clearer is something the team should stick at the top of their to-do list.

If you don’t follow the correct coding process you’ll just send a plain uncoded text message… oops! The process is confused by the fact that your secret text changes into the coded text when you tap the padlock. But repeat tapping the padlock apparently cycles through other stock secret messages (as well as prior ones, if you’ve typed others) so it’s not always clear whether you have correctly coded the text or not.

I was able to receive coded messages correctly via Kibo, but managed to send what I thought was a coded secret as a plain text message — so some care is needed.

To view a secret missive (when it has been sent correctly), the recipient presses on the fake text, as if they were going to copy and paste it, and taps ‘copy’ — at which point the secret message (if there is one) is displayed below, overlaid over the Kibo keyboard.

The app also does not make it clear when there is a secret embedded in a particular message. If it did, that wouldn’t be so very secret, although the disjointed conversation is a pretty big clue. It’s basically the digital equivalent of passing coded notes in class — or it is, when it works.

Kibo claims it is encrypting the secret messages it conveys (using symmetric encryption algorithm DES), so says it has no access to the text that’s stored encrypted on its servers, saying only the sender and the recipient are able to read the unencrypted messages.

How did they come up with the idea of hiding messages within messages — which remains a neat idea, even though the app clearly needs some UI work at this early stage… After “an iPhone spoiled a birthday surprise which was prepared by 15 people”, is how they tell it.

“This prompted us to think about the forced transparency in the digital age,” they write. “However, the idea to make another ‘safe’ messenger was considered to be short-sighted, and we decided to make a private cross-messenger add-in for all types of communications. After exploring the iOS capabilities, we have implemented a product based on an iOS external keyboard.”

They argue Kibo complements, rather than competes with secure messaging apps like Wickr and Telegram — since it’s not a “private messenger” itself — and “can be used in any messenger, even in an insecure one, allowing the users to exchange their messages in a private and secure manner”.

Who’s behind Kibo’s coded facade? The team self describes as “not a traditional startup” — preferring to be considered “a small community of innovators working together toward a common goal of protecting mobile users’ privacy”. The two co-founders of the five-strong “community” are Vitaly Halenchyk and Krill Davydov. Currently based in the U.S. they are planning to relocate to Europe.

Prior to working on Kibo, which they started this April — launching the app about a week ago (and garnering more than 10,000 users at this nascent stage) — they were involved with organizing education events and lectures for young entrepreneurs.

They’ve mostly been bootstrapping Kibo’s development but do have an investor helping with costs and resources, although they’re not disclosing who it is at this stage. “We took a small amount for development and nowadays all the operations are conducted under the umbrella of our investor’s company,” they tell TechCrunch, adding: “Recently, we have been issued a provisional patent application and will soon be ready for the investment rounds.”

For all their talk of not being a “traditional startup”, they are formulating a business plan for Kibo. It’s a free download but the plan is to monetize by introducing additional paid features and add-ons down the line. “Functionality of text hiding is free and will remain free in the future. However, we are going to introduce new paid features and add-ons, but it is too early to talk about it,” they note.

It is indeed early for Kibo. But it’s a nice idea — just one that needs a little more UI polish to really shine.

More TechCrunch

Expedia says Rathi Murthy and Sreenivas Rachamadugu, respectively its CTO and senior vice president of core services product & engineering, are no longer employed at the travel booking company. In…

Expedia says two execs dismissed after ‘violation of company policy’

When Jeffrey Wang posted to X asking if anyone wanted to go in on an order of fancy-but-affordable office nap pods, he didn’t expect the post to go viral.

With AI startups booming, nap pods and Silicon Valley hustle culture are back

OpenAI’s Superalignment team, responsible for developing ways to govern and steer “superintelligent” AI systems, was promised 20% of the company’s compute resources, according to a person from that team. But…

OpenAI created a team to control ‘superintelligent’ AI — then let it wither, source says

A new crop of early-stage startups — along with some recent VC investments — illustrates a niche emerging in the autonomous vehicle technology sector. Unlike the companies bringing robotaxis to…

VCs and the military are fueling self-driving startups that don’t need roads

When the founders of Sagetap, Sahil Khanna and Kevin Hughes, started working at early-stage enterprise software startups, they were surprised to find that the companies they worked at were trying…

Deal Dive: Sagetap looks to bring enterprise software sales into the 21st century

Keeping up with an industry as fast-moving as AI is a tall order. So until an AI can do it for you, here’s a handy roundup of recent stories in the world…

This Week in AI: OpenAI moves away from safety

After Apple loosened its App Store guidelines to permit game emulators, the retro game emulator Delta — an app 10 years in the making — hit the top of the…

Adobe comes after indie game emulator Delta for copying its logo

Meta is once again taking on its competitors by developing a feature that borrows concepts from others — in this case, BeReal and Snapchat. The company is developing a feature…

Meta’s latest experiment borrows from BeReal’s and Snapchat’s core ideas

Welcome to Startups Weekly! We’ve been drowning in AI news this week, with Google’s I/O setting the pace. And Elon Musk rages against the machine.

Startups Weekly: It’s the dawning of the age of AI — plus,  Musk is raging against the machine

IndieBio’s Bay Area incubator is about to debut its 15th cohort of biotech startups. We took special note of a few, which were making some major, bordering on ludicrous, claims…

IndieBio’s SF incubator lineup is making some wild biotech promises

YouTube TV has announced that its multiview feature for watching four streams at once is now available on Android phones and tablets. The Android launch comes two months after YouTube…

YouTube TV’s ‘multiview’ feature is now available on Android phones and tablets

Featured Article

Two Santa Cruz students uncover security bug that could let millions do their laundry for free

CSC ServiceWorks provides laundry machines to thousands of residential homes and universities, but the company ignored requests to fix a security bug.

1 day ago
Two Santa Cruz students uncover security bug that could let millions do their laundry for free

TechCrunch Disrupt 2024 is just around the corner, and the buzz is palpable. But what if we told you there’s a chance for you to not just attend, but also…

Harness the TechCrunch Effect: Host a Side Event at Disrupt 2024

Decks are all about telling a compelling story and Goodcarbon does a good job on that front. But there’s important information missing too.

Pitch Deck Teardown: Goodcarbon’s $5.5M seed deck

Slack is making it difficult for its customers if they want the company to stop using its data for model training.

Slack under attack over sneaky AI training policy

A Texas-based company that provides health insurance and benefit plans disclosed a data breach affecting almost 2.5 million people, some of whom had their Social Security number stolen. WebTPA said…

Healthcare company WebTPA discloses breach affecting 2.5 million people

Featured Article

Microsoft dodges UK antitrust scrutiny over its Mistral AI stake

Microsoft won’t be facing antitrust scrutiny in the U.K. over its recent investment into French AI startup Mistral AI.

1 day ago
Microsoft dodges UK antitrust scrutiny over its Mistral AI stake

Ember has partnered with HSBC in the U.K. so that the bank’s business customers can access Ember’s services from their online accounts.

Embedded finance is still trendy as accounting automation startup Ember partners with HSBC UK

Kudos uses AI to figure out consumer spending habits so it can then provide more personalized financial advice, like maximizing rewards and utilizing credit effectively.

Kudos lands $10M for an AI smart wallet that picks the best credit card for purchases

The EU’s warning comes after Microsoft failed to respond to a legally binding request for information that focused on its generative AI tools.

EU warns Microsoft it could be fined billions over missing GenAI risk info

The prospects for troubled banking-as-a-service startup Synapse have gone from bad to worse this week after a United States Trustee filed an emergency motion on Wednesday.  The trustee is asking…

A US Trustee wants troubled fintech Synapse to be liquidated via Chapter 7 bankruptcy, cites ‘gross mismanagement’

U.K.-based Seraphim Space is spinning up its 13th accelerator program, with nine participating companies working on a range of tech from propulsion to in-space manufacturing and space situational awareness. The…

Seraphim’s latest space accelerator welcomes nine companies

OpenAI has reached a deal with Reddit to use the social news site’s data for training AI models. In a blog post on OpenAI’s press relations site, the company said…

OpenAI inks deal to train AI on Reddit data

X users will now be able to discover posts from new Communities that are trending directly from an Explore tab within the section.

X pushes more users to Communities

For Mark Zuckerberg’s 40th birthday, his wife got him a photoshoot. Zuckerberg gives the camera a sly smile as he sits amid a carefully crafted re-creation of his childhood bedroom.…

Mark Zuckerberg’s makeover: Midlife crisis or carefully crafted rebrand?

Strava announced a slew of features, including AI to weed out leaderboard cheats, a new ‘family’ subscription plan, dark mode and more.

Strava taps AI to weed out leaderboard cheats, unveils ‘family’ plan, dark mode and more

We all fall down sometimes. Astronauts are no exception. You need to be in peak physical condition for space travel, but bulky space suits and lower gravity levels can be…

Astronauts fall over. Robotic limbs can help them back up.

Microsoft will launch its custom Cobalt 100 chips to customers as a public preview at its Build conference next week, TechCrunch has learned. In an analyst briefing ahead of Build,…

Microsoft’s custom Cobalt chips will come to Azure next week

What a wild week for transportation news! It was a smorgasbord of news that seemed to touch every sector and theme in transportation.

Tesla keeps cutting jobs and the feds probe Waymo

Sony Music Group has sent letters to more than 700 tech companies and music streaming services to warn them not to use its music to train AI without explicit permission.…

Sony Music warns tech companies over ‘unauthorized’ use of its content to train AI