Embed Notice
HTML Code
Corresponding Notice
- Embed this notice@threat @sun I think he exaggerates the threat of many of those vulnerabilities. The timing attack on libolm is virtually impossible except in the most perfect conditions where the host is on the same network, there is no congestion or packet loss, and the victim doesn't have any other processes running.
I agree though that deprecating libolm out of the blue was a cunt move on the matrix devs part. Someone ought to fork and continue its maintenance, at least when it comes to security issues.