Matrix with Martin Albrecht and Dan Jones
Security Cryptography Whatever
00:00
What's the Impact of Injecting a Mega Home Session Into Another Client?
The key request protocol is like every member of a group has a mega home session. And one of your devices might not have every single mega home session for a read because it's just joined or whatever. So when that happens and you get a message and you don't have the right to make a home thing for it, but another one ofyour devices might, you ask the device, you ask your other device, hey, do you have the crypto state? I need to decrypt this message. The bug is, as you just described it, normally it's request response, but you could just do unprompted response,. Just like here's a response, take it, even though you
Transcript
Play full episode
