People can't help but try to evangelize Matrix in response to things I wrote, so I just disclosed a few more issues in Matrix's cryptography to their security@ email address.

[soatok@furry.engineer]

People can't help but try to evangelize Matrix in response to things I wrote, so I just disclosed a few more issues in Matrix's cryptography to their security@ email address.

This time, the issues were in their Rust library, vodozemac.

One of them was pretty fucking stupid.

I'll do a better write-up than I was initially planning when they've had time to fix it.

[woltiv@mastodon.social]

@soatok Matrix answers the bold question of “could we make IRC slower and less reliable while also making it more unfriendly” with a resounding “yes”