5 ms·
I hope their security is better than in 2019 when the French Tchap service based on Matrix was immediately compromised by a trivial attack [1]. Matrix.org has
by jimlongton 4y ago
I hope their security is better than in 2019 when the French Tchap service based on Matrix was immediately compromised by a trivial attack [1].
Matrix.org has also been breached in the past [2].
That's ignoring the fact their project was born out of a company that operates front offices for one of the world's most aggressive spy agencies...
[1] https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-of-the-french-government-84b31517d144 https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-...
[2] https://matrix.org/blog/2019/04/11/we-have-discovered-and-addressed-a-security-breach-updated-2019-04-12 https://matrix.org/blog/2019/04/11/we-have-discovered-and-ad...
- preya2k 4y agoGot a source for that third claim of yours?
- jimlongton 4y agohttps://en.wikipedia.org/wiki/Matrix_(protocol)#Funding_Crisis https://en.wikipedia.org/wiki/Matrix_(protocol)#Funding_Cris... AMDOCS has been accused multiple times of being an extension of Mossad, including in the US where the investigations got quietly ended. Leaked cables from 2009 showed they were also on the radar of South Africa's intelligence agency [1]. [1] https://www.news24.com/news24/spy-cables-were-israeli-spies-tapping-sa-cellphones-20150430 https://www.news24.com/news24/spy-cables-were-israeli-spies-...
- preya2k 4y agoThanks for the links! It is very interesting, but I', not sure how/if what kind of influence this has on Matrix. Just because they were born out of a shady company, doesn't invalidate the project. Heck, we're using software (Disassemblers) that are maintained by the NSA (Ghidra) these days. Since they are open source (just like Matrix and Element) we can still be pretty sure that they're not doing anything shady.
- kitkat_new 4y ago> Just because they were born out of a shady company shady because of accusations?
- thaumasiotes 4y agoI would guess the general idea is that the shadiness causes the accusations, not the other way around.
- simplyaccont 4y agoand what exactly is shady about Amdocs ?
- jszymborski 4y agoI think that last claim deserves a citation.
- Arathorn 4y ago1. The Tchap issue was specific to the French deployment, rather than being a bug in Synapse or anything Matrix specific. (It was actually a bug in python, fwiw: https://bugs.python.org/issue34155 https://bugs.python.org/issue34155. Agreed that it should have been caught internally though) 2. Yup, unfortunately matrix.org got pwned 4 years ago. (Thankfully E2EE means that encrypted conversations weren't compromised). This was a (bad) sysadmin fail; again, nothing to do with Matrix, the protocol, or the implementations (and the rest of the network was of course unaffected). 3. I've never seen any evidence of Amdocs being involved in spying, and many of the accusations there seem to be rooted in antisemitism. They acquired the two companies (one UK, one French) which turned into Matrix in 2010; we span out and set up Element in 2017.
- fmajid 4y agoNo Mossad conspiracy theories needed on Amdocs. Aren't they a major supplier of CALEA interception equipment to US law enforcement agencies?