🔐 Project Hydra: Improving state resolution in Matrix

｢ Given the security-sensitive nature of this work, it was done under embargo by the backend team at Element, the Matrix.org Security Team, the Spec Core Team, alongside Timo Kösters (who privately reported a related vulnerability, helping jumpstart the project) and Florian Jacob (at Karlsruher Institut für Technologie) ｣

https://matrix.org/blog/2025/08/project-hydra-improving-state-res/

#matrix #opensource #cybersecurity

🔐 Project Hydra: Improving state resolution in Matrix

｢ Given the security-sensitive nature of this work, it was done under embargo by the backend team at Element, the Matrix.org Security Team, the Spec Core Team, alongside Timo Kösters (who privately reported a related vulnerability, helping jumpstart the project) and Florian Jacob (at Karlsruher Institut für Technologie) ｣

https://matrix.org/blog/2025/08/project-hydra-improving-state-res/

#matrix #opensource #cybersecurity

Curiously, @element seems to have pivoted their free client towards being more of a BBQ app. Presumably they offer more of a banquet version to enterprise users of their hosted service? Given the licensing of the Element apps, they could do that without publishing source code for it.

#chat#Matrix#Element

Matrix could really use more support in order to fix the problems currently happening as outlined in his video https://youtu.be/OyuqM7RbX5E?si=TkS7HeT8eQdGPmLL

While I'm harping on about Matrix, does anyone know if the GNOME plan to split Fractal into two apps (team chat/ instant messenger) ever went ahead?

https://blogs.gnome.org/tbernard/2018/05/16/banquets-and-barbecues/

GNOME announced in 2022 that they were using Matrix for their official team chat groups;

https://blogs.gnome.org/foundation/2022/06/02/gnome-chat-moves-to-matrix/

So presumably they've put some serious effort into bringing their own Matrix apps to maturity?

#Matrix#GNOME

I use ElementX almost exclusively for 1:1 DMs, and I suspect this is the market they're pivoting to. Leaving the team chat uses cases to other outfits like Gitter;

https://blog.gitter.im/2023/02/13/gitter-has-fully-migrated-to-matrix/

... ProcessOne (eJabberD);

https://www.process-one.net/blog/matrix-gateway-setup-with-ejabberd/

... RocketChat;

https://www.rocket.chat/blog/federation-at-rocket-chat-the-shift-to-a-native-solution

... and so on.

#Matrix#Element#ElementX

⚠️ Alarm raised over 'high-severity' vulnerabilities in Matrix messaging protocol•The Record

｢ The description suggests the bug affects the way rooms are controlled, by allowing a malicious administrator — for instance within a government agency’s IT system — to remove the permissions set by the official who created the channel ｣

https://therecord.media/matrix-messaging-protocol-high-severity-vulnerabilities

#matrix #opensource #cybersecurity

Is there anything like Schildichat Next for iOS? I have a friend who cannot use the Spaces feature in Element X, and cannot join LiveKit/Element Call voice chats in Element Classic. It would be great if there was a client which supported both of these and was on iOS.

#matrix #element

Is there anything like Schildichat Next for iOS? I have a friend who cannot use the Spaces feature in Element X, and cannot join LiveKit/Element Call voice chats in Element Classic. It would be great if there was a client which supported both of these and was on iOS.

#matrix #element

⚠️ Alarm raised over 'high-severity' vulnerabilities in Matrix messaging protocol•The Record

｢ The description suggests the bug affects the way rooms are controlled, by allowing a malicious administrator — for instance within a government agency’s IT system — to remove the permissions set by the official who created the channel ｣

https://therecord.media/matrix-messaging-protocol-high-severity-vulnerabilities

#matrix #opensource #cybersecurity

Apparently the latest #Matrix security vulnerability was so major, that the server implementers had to abide to an embargo before receiving details about it. I wonder how many #Matrix -related projects had to decline, due to e.g. their CI not being set up to build code not publicly on the main branch, and had to dash to implement the patch after the embargo was lifted. @matrix

I know punching down on Matrix is something people like to do here, but this was a good read about how difficult things are for them: https://lobste.rs/s/muk05v/reflections_on_matrix_criticism_over#c_8obbim

#Matrix

If you want to get a sense of what the Matrix network will be like once Matrix 2.0 is fully rolled out, get yourself ElementX, and try it with an account on the matrix.org homeserver. I haven't had a chance to really stress test it yet. But from what I've experienced so far, it's a *huge* improvement on Matrix 1.0.

EDIT 2: ElementX is the Matrix 2.0 version of Element. Despite the fact that it remains significantly incomplete, and may not meet all your needs 🤦‍♂️

#decentralisation #chat #Matrix

I know punching down on Matrix is something people like to do here, but this was a good read about how difficult things are for them: https://lobste.rs/s/muk05v/reflections_on_matrix_criticism_over#c_8obbim

#Matrix

We released version 0.12.1 of #nheko! This release includes a few security fixes around html escaping into the UI and properly attaching a mark of the web on Windows. I highly recommend you upgrade!

This release also takes the first steps to room version 12 compatibility regarding the upcoming #matrix security release.

You can find the release here: https://github.com/Nheko-Reborn/nheko/releases/tag/v0.12.1

Enjoy! 😊

Just in time for the security release, the first version of the "Room Upgrades" guide on matrix.org is published!

@HarHarLinks and I spent the last few hours at #why2025 finalizing it.

https://matrix.org/docs/communities/administration/#room-upgrades

#matrix

• Knock-knock.
  - Who's there?
  - Dozen.
  - Dozen who?
  - Dozen anyone want to let me in?

  Celebrating a dozen of #Fractal versions with knocking support! Get Fractal 12, the new version of your favourite #Matrix client for #GNOME from #Flathub now!

  https://discourse.gnome.org/t/fractal-12-released/30632

• Knock-knock.
  - Who's there?
  - Dozen.
  - Dozen who?
  - Dozen anyone want to let me in?

  Celebrating a dozen of #Fractal versions with knocking support! Get Fractal 12, the new version of your favourite #Matrix client for #GNOME from #Flathub now!

  https://discourse.gnome.org/t/fractal-12-released/30632

Just in time for the security release, the first version of the "Room Upgrades" guide on matrix.org is published!

@HarHarLinks and I spent the last few hours at #why2025 finalizing it.

https://matrix.org/docs/communities/administration/#room-upgrades

#matrix