Molly (Signal fork) has not been updated since 3 months and is vulnerable

	Molly (Signal fork) has not been updated since 3 months and is vulnerable(piefed.world)
	324 points by DeepLogin 1 day ago \| 185 comments
	tl;dr: Molly, a popular hardened fork of Signal, hasn't been updated since July 31 (v8.19.2-4) and now carries unpatched vulnerabilities that mainline Signal has already fixed, including an exploit disclosed in October and patched in Signal 8.27.1. Users are advised to switch back to mainline Signal and uninstall Molly until the project resumes regular updates.
	HN Discussion: ↑Signal now offers features that were Molly's main draw, making the switch back easier ↑Molly's abandonment validates Signal's pragmatic anti-fork stance for security reasons ↓Signal is hostile to power users by refusing features like UnifiedPush and Google-free builds ~Offering alternative forks or clarifying the actual severity of the vulnerability ↓Conspiracy claim that Signal has a government backdoor, promoting alternatives