Hacker News Reader

Quinn Norton had some pretty damning things to say about libpurple and its lack of security in 2014: https://medium.com/message/everything-is-broken-81e5f33a24e1

It's possible libpurple's security has improved since then, but I wouldn't count on it.

View on HN

Thanks for the link. I actually checked the CVEs so far and read their 'security' page. I have only skimmed the article, however, if it's just reverse engineering the protocols, and you are still using somebody else's server, what's the biggest risk? Maybe a vuln in the client that won't be fixed as fast as the official client?

Reply on news.ycombinator.com