Security Issues in Matrix’s Olm Library
I don't consider myself exceptional in any regard, but I stumbled upon a few cryptography vulnerabilities in Matrix's Olm library with so little effort that it was nearly accidental. It should not be this easy to find these kind of issues in any product people purportedly rely on for private messaging, which many people evangelize incorrectly as a Signal alternative…
http://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/
Soatok Dreamseeker /
npub17u…4305p
2024-08-14 12:01:26
Author Public Key
npub17uyfsxsnfgg6dgqazlfjv2gdl235mq0dug9wq6kjq9ngzh6pdyese4305pPublished at
2024-08-14 12:01:26Event JSON
{
"id": "87f7e6eab1ab0fb54808794eeb75ccfcb52740102bc011405e31cd63ef098e57",
"pubkey": "f708981a134a11a6a01d17d326290dfaa34d81ede20ae06ad20166815f416933",
"created_at": 1723636886,
"kind": 1,
"tags": [
[
"proxy",
"https://furry.engineer/users/soatok/statuses/112960266988374138",
"activitypub"
]
],
"content": "Security Issues in Matrix’s Olm Library\n\nI don't consider myself exceptional in any regard, but I stumbled upon a few cryptography vulnerabilities in Matrix's Olm library with so little effort that it was nearly accidental. It should not be this easy to find these kind of issues in any product people purportedly rely on for private messaging, which many people evangelize incorrectly as a Signal alternative…\n\nhttp://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/",
"sig": "b495d39896e3157e4f3b0394232b04996fbbf82069856e74215c5fff7ebcbbd6192852460a06f247eb73ab1970979bfa78a0595e7ba1f0a435b00b32c5aa668a"
}