This is a year-old paper but now there is an easy-to-use implementation of the attack: https://github.com/gommzystudio/device-activity-tracker

Signal developers' verdict is WONTFIX: https://github.com/signalapp/Signal-Android/pull/14463

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 10 months ago* (last edited 10 months ago)

https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/

This is the most strongly written writeup I know of (whether it's something you, likewise, find worth being wary about is, naturally, up to you, though).

  • source
  • parent