Notices tagged with matrix, page 8

What's the point of all the flashy encrypted chatrooms when a hacker can gain "access to unencrypted message data" stored on the server? Matrix is failing the "strictly no bullshit" test.

#matrix

'if you're a matrix.org user you should change your password now.'

It's running again, but:
'The hacker exploited a vulnerability in our production infrastructure'

https://matrix.org/blog/2019/04/11/security-incident/

#infosec #matrix

Apparently, "ZRTP End-to-End Encryption cannot Protect VBR Streams. When using ZRTP + SRTP for encryption in any stretch that goes on the clearnet, be sure to never select a VBR (variable bitrate) codec as the pauses in a conversations produce fingerprints in the encrypted stream that allow the adversary to infer what words are being said." I assume all #WebRTC based solutions (#matrix, #signal, #jitsimeet) suffer the same.

https://www.whonix.org/wiki/Voip
#privacy #fingerprinting #voip

Just learned about #Pattle, a new #Android #Matrix client which behaves similar to many popular messaging apps like Telegram or Signal. A important step to mass adoption. https://git.pattle.im/pattle/android

Les dejo una interesante lectura que habla de los protocolos de #Matrix #xmpp y #Signal

https://blog.jabberhead.tk/2019/03/10/a-look-at-matrix-orgs-olm-megolm-encryption-protocol/

@archero @maperal @fisherroot @shevek

#matrix #underground #humans #machines #chilik

Thanks to @matthew and Hubert Chathi for their kind, supplementary comments on my latest blog post about Olm/Megolm encryption.

https://blog.jabberhead.tk/2019/03/10/a-look-at-matrix-orgs-olm-megolm-encryption-protocol/

#matrix #xmpp #olm #omemo #encryption