News for hackers. Stuff that matters.
Re:XMPP: Admin-in-the-middle by infosechandbook on Thursday November 04, 2021 @08:41AM (#29106396)
> the user isn't really in control of who can see this information

Server-side parties (e.g., the admin) can see the status information without adding somebody to the group. It is in cleartext, passing the server.

There are no comments on this comment yet.