Developers of the decentralized messaging system Matrix announced that they are shutting down the servers Matrix.org and Riot.im due to a breach in the infrastructure. It turned out that the servers were compromised twice, and hackers posted full configuration details of the server on the project’s main page. They also clarified that they copied the database with hashes of passwords for nearly five and a half million Matrix users. As proof, they published the hash of the leader of the Matrix project.
According to the developers, the problem was manifested in an outdated continuous integration system, Jenkins. There was a vulnerability through which attackers were able to access the system. Currently, all users are recommended to change their passwords. However, during the password change process in the main Riot client, an issue was found with the disappearance of backup files containing keys for restoring encrypted messages.
The Matrix project is positioned as a secure decentralized solution with end-to-end encryption. It promises a high level of security and user privacy, as well as open standards. One of the arguments is the use of the Signal algorithm. The system also supports search and unlimited viewing of message history, file transfer, voice and video communication. There are also small features like typing notifications, read receipts, push notifications, and server-side search. server.
On the server side, history and client state synchronization, various identifier options, and so on are supported. However, the developers have not clarified when the service will be fully operational again.
Kilde: 3dnews.ru
