Embed Notice

@soatok @chiraag Oh, hey. Thanks for chiming in. I'd meant to find an address and ask if you'd written up an analysis of Delta Chat. I didn't see on one your blog, but I might have missed it.

Were the vulnerabilities you found in Conversations fixed? When you say "a month or so ago" that makes me think 2.19.9 or thereabouts according to their changelog's history, and nothing from that version on (or from that version earlier, looking again) suggests corrected security flaws.

I just can't bring myself to use Signal. Two or three pushes a week with not the first notion of what they changed is worrisome, and I don't see a changelog maintained in their github repository. "Trust us" as the only alternative to "read each commit" leaves a lot of room for a middle ground where they describe what they're changing. A codebase that *needs* that level of churn would seem to be wildly unstable, untested, unmanaged, or something along those lines.

Anyway, this is lots of questions about stuff that's not your responsibility to manage. But from what I can see, your opinions are worth knowing, so thanks in advance if you feel like answering any or all of this.

(PS: Not a furry here, but I do play an anthropomorphic chicken in at least one online community.)