c/Meshcore · by litchralee@sh.itjust.works · 117d

MeshCore's problem with security | Alainx277's Blog

https://alainx277.com/posts/meshcores-problem-with-security/

What can be done

The most glaring problem with MeshCore is that the maintainers do not openly communicate vulnerabilities. Users are left without knowledge of any problems, unable to judge whether to trust MeshCore with their private communication.

9 points · 3 comments · view on lemmy.world

3 Comments

hades@feddit.uk · -4 pts · 117d (2 replies)

Meshcore is a toy project for nerds that like radios. Comparing it Whatsapp is setting an unjustifiably high standard. I don’t think any reasonable person would trust their private communications to Meshcore.

litchralee@sh.itjust.works · 4 pts · 117d (1 reply)

The meshcore.io page is unambiguous about their objectives:

Messages are end-to-end encrypted to ensure your chats stay private.

Create private encrypted group channels for securely talking with friends and family.

Although the project's stated objectives might not match what they can currently deliver, people can and do rely upon what's written on the tin. And they would be reasonable in doing so.

hades@feddit.uk · 1 pts · 117d

Hmm. Well, you’re not wrong, they should not have put that on the home page.

But also I don’t agree that trusting whatever is “written on the tin” is reasonable, especially if talking about security and privacy.