Twitter Feed
Just going to add here: MEGA’s blog makes it look like this was part of a series of disclosures concerning *one* version of MEGA. It wasn’t. We broke MEGA once, they “fixed” it, and then we broke the “fixed” version.
with quote tweet:
@kennyog replied to a tweet by @kennyog:
We disclosed the attacks to MEGA on 29.09.2022. The disclosure process has been super smooth again - kudos to the MEGA team and thanks for the bounty. They’re releasing an update today, their blog at https://blog.mega.io/e2ee-security-update will have details. (12/16)