YHacker Newsscreenshots

Screenshot of piefed.world: Molly (Signal fork) has not been updated since 3 months and is vulnerable

First screen, captured 2 days ago. Hover to scroll the page, or open the video.

Molly (Signal fork) has not been updated since 3 months and is vulnerable

More from piefed.world →

A PieFed 'You Should Know' post warning that the Signal fork Molly hasn't been updated since July and remains vulnerable to bugs fixed in mainline Signal, with comments.

What HN thinks

A thread about an outdated fork that quickly became the annual Signal grievance festival, with a side of pineapple discourse.

Signal neglects power users
Many complain Signal refuses UnifiedPush, F-Droid builds, Google-free versions and third-party clients, pushing people to forks like Molly.
Pragmatic tradeoffs for normies
Others argue centralization, phone numbers and no third-party clients are deliberate security and adoption tradeoffs that made E2EE mainstream.
Official Signal now covers Molly's niche
Several users learned Signal now supports linking a second phone or tablet, removing their main reason for using Molly.

Consensus: No real consensus on Signal's philosophy, though most agree the official app now supports secondary phones and that running an unpatched fork is a real risk.

Recommended in the comments

Matrix (other): Suggested as a self-hostable, decentralized alternative with improving calling and encryption.
Element Server Suite ↗ (tool): Pitched as the easiest robust way to run a Matrix server.
SimpleX Chat ↗ (product): Cited as a verifiable, distributed alternative with good Tor support, though its marketing was criticized.
signalbackup-tools ↗ (tool): Recommended for recovering messages from Signal backups.
Polly ↗ (product): Its maintainer released a stopgap build with the recent security fixes.
Insular (tool): Lets you run a second Signal account in parallel on one phone.

Summarised by Claude from the comment thread 1 day ago.

Points: 311
Comments: 182
Best rank: #1
Posted: 2026-10-31 by DeepLogin
Category: Security

signal molly android messaging-apps vulnerabilities fediverse

All captures:

Full page

Full-page screenshot of piefed.world

Captured 2 days ago. Click for the whole screenshot.

Looks similar

Screenshot of pwn.watch: What’s getting pwned right now

What’s getting pwned right now (pwn.watch)

353 points by mrkd 11 days ago | 165 comments

pwn.watch is a live feed of ongoing security incidents and CVEs, listing affected software, patch status, fixed versions, and source advisories.

vulnerability-tracker cve security-incidents supply-chain

Screenshot of blog.kumio.org: Setting Up an RK3588 SBC QEMU Hypervisor with ZFS on Debian

Setting Up an RK3588 SBC QEMU Hypervisor with ZFS on Debian (blog.kumio.org)

59 points by kumiokun 1 year ago | 17 comments

Screenshot of rushter.com: Oh My Zsh adds bloat

Oh My Zsh adds bloat (rushter.com)

285 points by fla 9 months ago | 255 comments

Screenshot of mastodon.sdf.org: NetBSD adds a new text editor called atto

NetBSD adds a new text editor called atto (mastodon.sdf.org)

181 points by luke8086 4 days ago | 142 comments

Mastodon post from the NetBSD Foundation announcing atto(1), a small modeless text editor added to NetBSD-current's base system, with replies.

netbsd atto text-editors vi

Screenshot of github.com: It's unlikely that there will be any further releases of mt32-pi

It's unlikely that there will be any further releases of mt32-pi (github.com)

154 points by nickt 1 year ago | 54 comments

Screenshot of mastodon.catgirl.cloud: eMudhra Login Bypass

eMudhra Login Bypass (mastodon.catgirl.cloud)

5 points by _ache_ 10 days ago | 1 comments

Related stories

Screenshot of jyn.dev: I'm just having fun

I'm just having fun (jyn.dev)

457 points by lemper 10 months ago | 209 comments

A blog post by jyn, a compiler engineer, arguing that programming isn't a competition and that they write about technical topics simply for fun.

programming-culture imposter-syndrome compilers build-systems

Screenshot of pinecoder.dev: My old job feels distant now

My old job feels distant now (pinecoder.dev)

28 points by speckx 17 days ago | 27 comments

A personal blog post on pinecoder.dev reflecting on how the author's previous job now feels distant.

career-change personal-essay software-engineering job-transition

Screenshot of chaos.social: So this guy is now S3. All of S3

So this guy is now S3. All of S3 (chaos.social)

524 points by aendruk 3 years ago | 332 comments

Mastodon post showing that Bluesky handles verified by serving a file from a domain let someone claim an S3 domain handle.

bluesky domain-verification aws-s3 handle-impersonation

Screenshot of discuss.python.org: Anthropic invests $1.5M in the Python Software Foundation

Anthropic invests $1.5M in the Python Software Foundation (discuss.python.org)

329 points by ayhanfuat 9 months ago | 151 comments

A Python discussion forum post from PSF staff announcing Anthropic's $1.5 million, two-year donation to the PSF focused on security work.

python-software-foundation anthropic python open-source-security

Screenshot of walzr.com: IMG_0001

IMG_0001 (walzr.com)

1750 points by walz 1 year ago | 278 comments

Riley Walz's project showcasing about 5 million unedited YouTube videos with default IMG_XXXX filenames uploaded from iPhones between 2009 and 2012, shown in random order.

youtube iphone internet-archaeology web-crawling

Screenshot of github.com: PeerTube is a free, decentralized and federated video platform

PeerTube is a free, decentralized and federated video platform (github.com)

592 points by doener 4 months ago | 274 comments

GitHub repository for PeerTube, an AGPL-licensed ActivityPub-federated video streaming platform that uses P2P delivery in the browser.

peertube activitypub fediverse video-streaming