One researcher described libpurple to Motherboard as a perennial target for exploitation, burdened by what some perceive as an old, bloated codebase and cryptographic features that aren't part of libpurple's design, but merely layered on top. This isn't news to those in the security community. And security-or its lack thereof-is why a lot of people think libpurple should be replaced. But just because something is popular doesn't necessarily mean it's secure. It's the common codebase upon which some of the most popular instant messaging clients, including Adium and Pidgin, are built. There's a good chance you've encountered libpurple, even if you don't know it by name.
0 kommentar(er)
