A Matrix Update Patches Serious End-to-End Encryption Flaws

  • 📰 WIREDScience
  • ⏱ Reading Time:
  • 38 sec. here
  • 2 min. at publisher
  • 📊 Quality Score:
  • News: 18%
  • Publisher: 55%

United States Headlines News

United States Latest News,United States Headlines

The messenger protocol had gained popularity for its robust security, but vulnerabilities allowed attackers to decrypt messages and impersonate users.

The fifth and sixth attacks are what the researchers call trusted impersonation and impersonation to confidentiality break. Each builds off the other to enable a server to impersonate users and read their messages. A seventh attack works against a backup feature and is only of theoretical interest because the researchers can’t instantiate an attack exploiting it against a real Matrix server.

By confusing the legitimate implementation bugs which only affect matrix-js-sdk and derivatives with these lower severity protocol design considerations, the researchers have artificially inflated the overall severity of the problem, by falsely implying that the protocol itself is vulnerable. Besides disagreeing on some of the specific vulnerabilities, the researchers and Hodgson remain at odds on another point. The researchers said the vulnerabilities they uncovered “highlight a lack of a unified and formal approach to security guarantees in Matrix” and that the specification has grown “organically with new sub-protocols adding new functionalities and thus inadvertently subverting the security guarantees of the core protocol.

 

Thank you for your comment. Your comment will be published after being reviewed.
Please try again later.

404

We have summarized this news so that you can read it quickly. If you are interested in the news, you can read the full text here. Read more:

 /  🏆 385. in US

United States Latest News, United States Headlines

Similar News:You can also read news stories similar to this one that we have collected from other news sources.

Update: Rape suspect captured hours after standoff ends inside Pleasant Hill Nordstrom RackA rape suspect, believing he had outwaited pursuing officers by hiding inside the ceiling of the Pleasant Hill Nordstrom Rack, was arrested by an undercover officer after he emerged from the store Wednesday afternoon.
Source: KPIXtv - 🏆 443. / 53 Read more »

Council Committee Backs End Date for LA's COVID-19 Eviction MoratoriumA council committee recommended for LA’s eviction protections due to COVID-19 to end on Jan. 31 setting a potential end date for the moratorium.
Source: NBCLA - 🏆 319. / 59 Read more »

White House gains partners to end US hunger within a decadeBefore Wednesday's White House conference, Biden’s administration released a list of more than $8 billion in commitments to the cause from private companies, charitable foundations and industry groups. 8 billion to end hunger in the US .... 40 Billion to Ukraine.... tells you everything you need to know. DC swamp has talked about ending hunger/poverty, all while spending billions - Probably Trillions - Of dollars for a century+. Biden will accomplish nothing, almost certainly causing more problems as his handler's administration has done with everything else they've touchd. Why are Corporations permitted to purchase access to Politicians and influence policy? These are Unelected Corporations pushing their ESG agenda upon Americans using investor capital. This is fcking illegal.
Source: clevelanddotcom - 🏆 301. / 63 Read more »

Biden on ending hunger in US: 'I know we can do this'The Biden administration is counting on a variety of private-sector partnerships to help fund and implement its goal of ending hunger in America by 2030. biden kprc2 click2houston us
Source: KPRC2 - 🏆 80. / 68 Read more »

Governor signs contentious nursing home licensing bill that splintered advocatesA controversial bill aimed at fixing aspects of California’s broken nursing home licensing system was signed Tuesday by Gov. Gavin Newsom, who faced dueling pressure from advocates who typically are aligned.
Source: CalMatters - 🏆 261. / 63 Read more »

Warzone Season 5 Reloaded patch notes bring loadout drop tweaks | Digital TrendsActivision has published the latest patch notes for CallofDuty: Warzone Season 5 Reloaded. These are the update's most notable changes.
Source: DigitalTrends - 🏆 95. / 65 Read more »