| 11 Aug 2025 |
Charles | https://matrix.org/blog/2025/08/security-release/ | 17:04:28 |
Charles | so when are we moving to zulip | 17:08:13 |
QuadRadical (Ping) | hmm, why? | 17:39:18 |
QuadRadical (Ping) | if the rooms are upgraded whats the problem? | 17:39:39 |
QuadRadical (Ping) | im probably missing something | 17:39:52 |
K900 | The state resolution algorithm is broken | 17:40:07 |
K900 | Fundamentally | 17:40:10 |
K900 | Room v12 is a hack | 17:40:14 |
QuadRadical (Ping) | is that specifically the room id create hash thing? | 17:41:31 |
K900 | No, it's the fact that the room creator is now special | 17:42:15 |
K900 | And has extremely special privileges that no one else has | 17:42:23 |
QuadRadical (Ping) | ah i see | 17:42:28 |
@emma:rory.gay | (and are non revokable) | 17:42:34 |
K900 | To work around the fact that anything past room creation can be messed with | 17:42:42 |
QuadRadical (Ping) | hmm, not good | 17:42:46 |
emily | it's literally just an admission that state resolution doesn't work right? | 17:43:21 |
K900 | Basically yes | 17:43:31 |
emily | oh I guess you said as much | 17:43:34 |
@emma:rory.gay | i mean, they'vebeen admitting that for ages now | 17:43:48 |
emily | btw it's pretty funny that Synapse failed to put out a working release | 17:43:47 |
emily | after setting their own deadline and then also delaying disclosure 3 weeks | 17:43:55 |
emily | not sure how they managed to avoid running tests or linting during all that sitting around time | 17:44:08 |
@emma:rory.gay | we've always known that state res is a broken mess, we've been joking about state res v3 for years now | 17:44:14 |
@emma:rory.gay | matrix spec is the next valve: cant count to 3 | 17:44:22 |
Charles | also zulip is just massively better for this particular use case (and i would argue better for public rooms in general) (in my testing so far) | 17:47:50 |
Charles | wait what | 17:48:45 |
emily | see https://matrix.to/#/!vxTmkuJzhGPsMdkAOc:transformierende-gesellschaft.org/$Gi9Fk9kEfbkUl4wGImJFL-T5EZO0BJ5ePGTrYRzsD9k?via=utzutzutz.net&via=matrix.org&via=tchncs.de, https://matrix.to/#/!ATURSDtpSAgOTfvtbq:lossy.network/$HJYKt60KYvra3DKIjZq88T18DaMFgaf6Y4fk9eJ_pVM?via=nixos.org&via=matrix.org&via=stratum0.org | 17:49:04 |
Charles | rooms i am not in | 17:49:42 |
Charles | https://github.com/element-hq/synapse/releases but yeah i don't see anything here lol | 17:49:50 |
@emma:rory.gay | yeah they botched teh release | 17:50:04 |