• kittenzrulz123
    link
    fedilink
    English
    arrow-up
    3
    ·
    6 days ago

    Im not a security researcher tbh and I havent extensively studied the security model of Signal (I use Matrix)

    • sugar_in_your_tea@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      6 days ago

      Same. I’m just generally pretty cyber-security curious, and have read a bit on this topic.

      I think Signal and Matrix are absolutely fantastic. I use Signal as an SMS replacement and Matrix for group chats, and I whole-heartedly recommend both.

      BTW, thanks for providing the CVEs, I hope that answers a few peoples’ questions about it. One thing to note is that a high number of CVEs is indicative of a lot of academic interest, which is a good indicator that a project is interesting to the security community. So seeing a lot of CVEs is a good thing, assuming the more critical ones get close quickly (and Signal does a good job keeping up with updates).

      • kittenzrulz123
        link
        fedilink
        English
        arrow-up
        3
        ·
        5 days ago

        Thats why the Linux kernel has a massive amount of CVEs, its extensively audited and researched.