cross-posted from: https://piefed.world/c/ysk/p/1503393/ysk-molly-signal-fork-has-not-been-updated-since-3-months-and-is-vulnerable-to-attacks-f

As of now, Molly lastest release was in 31 July (Version v8.19.2-4).

It contains vulnerabilities that had been simply fixed in mainline Signal.

Take for example the latest exploit disclosed in October, it has been fixed in Signal 8.27. 1. Meanwhile Molly remains vulnerable.

It's currently recommended to use mainline Signal and delete Molly till they at least return to updating their app adequately, if they ever will.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 week ago (3 children)

I use molly because i have an android smartphone and tablet and running both with signal is not possible with signal. (Maybe the changed it? I have to check it)

  • source
  • parent
  • hideshow 3 child comments
  • [–] 6 points 1 week ago (2 children)

    They did! (If you're talking about pairing a tablet with your smart phone like how their desktop app pairs).

    https://aboutsignal.com/news/signal-allows-android-phones-to-be-linked-as-secondary-devices/

  • source
  • parent
  • hideshow 2 child comments