News for hackers. Stuff that matters.

A comment on Disclosing E2EE vulnerability in multiple Matrix clients. Parent comment

Re:Disclosing E2EE vulnerability in multiple Matrix clients by COGlory on Monday September 13, 2021 @01:41PM (#28514340)
What dustup around end-to-end encryption? I'm only familiar with ProtonMail's IP logging controversy. I was unaware it impacted E2E at all?
[ Parent | on HN ]
Re:Disclosing E2EE vulnerability in multiple Matrix clients by 0xdeadb00f on Monday September 13, 2021 @09:08PM (#28518956)
I'm pretty sure OP is just misinformed. That, or they're talking about that one huge hole in PM's PGP implementation years and years ago.
[ Parent | on HN ]
Re:Disclosing E2EE vulnerability in multiple Matrix clients by nightpool on Thursday September 16, 2021 @11:11AM (#28552810)
Right, the dust-up was "PM advertises their service as secure and end-to-end encrypted, but in practice that doesn't mean much because user access is non-anonymous and they're still a central metadata honeypot for any law enforcement agency to log accesses to" (compared to e.g. Signal which AIUI is designed as an anonymous dropbox so that Signal can't correlate between user access to their servers and individual senders)
[ Parent | on HN ]
Re:Disclosing E2EE vulnerability in multiple Matrix clients by abnercoimbre on Monday September 13, 2021 @07:06PM (#28518069)
Did you find further information? Would've been nice for the GP to point to a source or news item.
[ Parent | on HN ]