Comment on Signal clone used by Trump official stops operations after report it was hacked

30p87@feddit.org ⁨5⁩ ⁨days⁩ ago

• overload@sopuli.xyz ⁨5⁩ ⁨days⁩ ago

  Risk of forks of a FOSS project that turn out to have added a vulnerability I think is the point.

  source

  • 30p87@feddit.org ⁨5⁩ ⁨days⁩ ago

    The problem here is not the fork itself tho, and it rarely is. The very obvious and openly communicated issue is the complete undermining of E2EE and sending everything to a single entity. Of course, very niche forks may have too few eyes on them to detect malicious changes, but that just isn’t at all the current situation with the Signal fork.

    source

    • bradorsomething@ttrpg.network ⁨4⁩ ⁨days⁩ ago

      I’d argue security through obscurity was gone by 2000, for anything that can be pinged.

      source
  • Ulrich@feddit.org ⁨5⁩ ⁨days⁩ ago

    Was the Signal fork FOSS?

    source