3 ms·
Quinn Norton had some pretty damning things to say about libpurple and its lack of security in 2014: https://medium.com/message/everything-is-broken-81e5f33a24e
by skyfaller 8y ago
Quinn Norton had some pretty damning things to say about libpurple and its lack of security in 2014: https://medium.com/message/everything-is-broken-81e5f33a24e1 https://medium.com/message/everything-is-broken-81e5f33a24e1
It's possible libpurple's security has improved since then, but I wouldn't count on it.
- brachi 8y agoThanks for the link. I actually checked the CVEs so far and read their 'security' page. I have only skimmed the article, however, if it's just reverse engineering the protocols, and you are still using somebody else's server, what's the biggest risk? Maybe a vuln in the client that won't be fixed as fast as the official client?