3 ms·
The encryption isn't alleged to have been compromised. The app itself deals with a lot of untrusted input (eg, thumbnailing video files you've been sent) so the
by mjg59 2y ago
The encryption isn't alleged to have been compromised. The app itself deals with a lot of untrusted input (eg, thumbnailing video files you've been sent) so there's a meaningful attack surface outside the protocol itself.
- ruined 2y agonote for signal users: in settings, you can disable link previews and automatic media download.
- stavros 2y agoWhy are link previews a problem? Presumably I only generate previews for links I've vetted.
- 3eb7988a1663 2y agoIt seems like most of the exploits come down to blowing up a parser of one data format or another. Myriad from which to choose, they are written in C for historical reasons, and probably play fast and loose with validation in the name of performance.
- stavros 2y agoTrue, I guess you're right.