PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Security assessment of instant messaging app ChatSecure: when privacy matters

blog.quarkslab.com | research | #privacy | #ios | #audit | #secure-messaging | #chatsecure | #otr
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab's assessment of the iOS ChatSecure messenger for OpenITP: three researchers spent about 20 days probing cryptography, XML fuzzing and app security of version 2.2 for information leaks.
Published
Collected

Related coverage

blog · blog.trailofbits.com
How Trail of Bits helps verify the integrity of your Signal chats
Trail of Bits explains Signal's Automatic Key Verification key-transparency system and describes the independent auditor it operates, one of three signers that make server key substitution detectable.
research · blog.quarkslab.com
Triple Threat: Signal's Ratchet Goes Post-Quantum
Quarkslab examines Signal's new Sparse Post Quantum Ratchet (SPQR): how it piggybacks on ML-KEM to add post-quantum security to message-key derivation alongside the existing double ratchet.
research · blog.quarkslab.com
Audit of Session Secure Messaging Application
Quarkslab audited Session, the Signal-forked secure messenger by Oxen, reviewing its Android, iOS and desktop apps and its onion-routing cryptography; all findings were patched during the audit.
research · blog.quarkslab.com
Make Confide great again? No, we cannot
Assessment of Confide: modifying its Electron client and inspecting TLS traffic shows the server can read messages via man-in-the-middle; anti-screenshot and deletion features can also be defeated.
research · bughunters.google.com
Google's PageBreak Project – Real-World Findings
This post provides a technical deep dive into specific, real-world vulnerabilities discovered by Google's PageBreak scanner
research · calif.io
Apple Internals: Endpoint Security ships in iOS 27.2 beta
# Apple Internals: Endpoint Security ships in iOS 27.2 beta Is antivirus coming to iPhone? Josh Maine September 18, 2026 apple Contents 1. Apple Internals: Endpoint Security ships in iOS 27.2 beta...
Back