URGENT SIGNAL ZERO DAY
Disable generate link preview in signal settings under chats. https://video.nostr.build/a8add5e7937bcde3616b2be969aed1e41a5df9452e5122c06fbe6ebc53de7cd3.mov
Discussion
🙏🙏
Looks like I already had that disabled. nostr:npub1e2rd2k45ym2jmctnysfadxumrvrr57vqj69ck6trt2y62c40r0kqs9lx8t tagging you for awareness.
Thanks!
Any more info?
Dunno if it’s weaponized but it’s there. Best to just disable the setting.
Thank You!
switch to keet.io
I don't use Signal, but out of interest, what is this good for ?
Encrypted end to end messaging.
Link previews seem like a bad idea for a private messenger in general.
Thank you!
https://nvd.nist.gov/vuln/detail/CVE-2023-4863
https://github.com/search?q=repo%3Asignalapp%2FSignal-iOS%20libwebp&type=code
https://github.com/search?q=repo%3Asignalapp%2FSignal-Android%20libwebp&type=code
Not sure what I'm supposed to take away from your post. 😬
Is this confirming that actually there are vulnerabilities? I cannot open the github links without an account.
They were using a library with a vulnerability in it. If you updated signal recently. You're fine. Or disable the link preview and you're fine.
Signal is broken in many ways.
https://crnkovic.dev/signal-groups-v2-is-a-privacy-downgrade/