Resources(82)

  • libpurple OTR information leakage

    CENSUS

    A design flaw in libpurple causes the plaintext of OTR messages to be broadcast over DBus, exposing private conversations to any process running under the same user account. Because libpurple does not propagate "no‑log" or privacy flags to third‑party listeners, applications such as widgets or notification systems may...