| 11 Aug 2025 |
emily | and broke linting CI | 17:50:51 |
Charles | ah lol | 17:50:59 |
emily | so I guess they just did not test it⦠? | 17:51:00 |
Gnuxie ππ | @matthew is this true meow? | 17:51:52 |
@emma:rory.gay | element matthew isnt here... lol | 17:52:15 |
K900 | Well the vuln seems to be "you can force well-behaved servers to roll back to any previous room state" | 17:52:27 |
emily | (it was sil's offer, I think he asked me to open an issue in NixOS/org or something for it?) | 17:52:28 |
K900 | Which isn't quite "arbitrary state overwrite" | 17:52:40 |
Charles | i ended up setting up my own zulip instance that i've primarily been using fwiw | 17:52:44 |
K900 | But it does mean that the create event is now uniquely special | 17:52:47 |
emily | so you're saying even older room versions get to have an omnipotent creator! | 17:53:04 |