AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
A Semi Trusted Impersonation Attack in the Matrix Protocol
The key sharing feature is that you've got each user has a bunch of devices. And a design goal is that when a user enters a chat, you'd like all of their devices to be able to read messages from that point onwards. The attack achieves the same level of impersonation as a legitimate feature called key forwarding or key sharing in the matrix protocol. It's kind of just a simple request response protocol. You can forcibly send one of those messages over home to a client and then accept it.