PGP isn't safe they said. Use Signal they said. https://
Nino ☕ liked this post
Yes, pretty much. Their fix didn't actually fix it in all cases. So the first "fixed" version is still vulnerable.
, May 18 2018 on twitter.com
So surely it’s wrong to call this a bug in signal, when it’s actually in an underlying piece of technology?
, May 18 2018 on twitter.com
No, this is a bug in Signal's code. And an embarrassing one at that. I would not trust critical communication to Signal tbh.
, May 18 2018 on twitter.com
If you say that using Electron for security-critical application is the bug, then yes. If you build on it, then as a developer you have to make sure to deal with the quirks of the Web Platform, and with Electron you have to accept that its Web Platform engine is always outdated.
, May 18 2018 on twitter.com
Also on: @skddc raucao@kosmos.social
Isn’t this the same vulnerability in electron recently?
Emelia, May 18 2018 on twitter.com