{ "@context": "https://schema.org", "@id": "https://aggr.aymericbeaumet.com/items/hnrss-org/2026-10-31-molly-signal-fork-has-not-been-updated-since-3-months-and/#webpage", "@type": [ "WebPage", "ArchiveComponent" ], "articleBody": "cross-posted from: [https://piefed.world/c/ysk/p/1503393/ysk-molly-signal-fork-has-not-been-updated-since-3-months-and-is-vulnerable-to-attacks-f](https://piefed.world/c/ysk/p/1503393/ysk-molly-signal-fork-has-not-been-updated-since-3-months-and-is-vulnerable-to-attacks-f)\n\nAs of now, Molly [lastest release](https://github.com/mollyim/mollyim-android/releases) was in 31 July (Version v8.19.2-4).\n\nIt contains vulnerabilities that had been simply fixed in mainline Signal.\n\nTake for example the [latest exploit disclosed in October](https://www.privacyguides.org/news/2026/10/22/signal-vulnerability-allow-audio-and-possibly-video-to-continue-after-hanging-up/), it has been fixed in Signal 8.27. [1](https://aboutsignal.com/news/signal-fixes-bug-that-could-affect-ending-calls-on-android/). Meanwhile Molly remains vulnerable.\n\nIt’s currently recommended to use mainline Signal and delete Molly till they at least return to updating their app adequately, if they ever will.\n", "authors": [ "DeepLogin" ], "captured_at": "2026-10-31T15:15:45.849013716+00:00", "category": "news", "content_html": "

cross-posted from: https://piefed.world/c/ysk/p/1503393/ysk-molly-signal-fork-has-not-been-updated-since-3-months-and-is-vulnerable-to-attacks-f

\n

As of now, Molly lastest release was in 31 July (Version v8.19.2-4).

\n

It contains vulnerabilities that had been simply fixed in mainline Signal.

\n

Take for example the latest exploit disclosed in October, it has been fixed in Signal 8.27. 1. Meanwhile Molly remains vulnerable.

\n

It’s currently recommended to use mainline Signal and delete Molly till they at least return to updating their app adequately, if they ever will.

\n", "content_markdown": "cross-posted from: [https://piefed.world/c/ysk/p/1503393/ysk-molly-signal-fork-has-not-been-updated-since-3-months-and-is-vulnerable-to-attacks-f](https://piefed.world/c/ysk/p/1503393/ysk-molly-signal-fork-has-not-been-updated-since-3-months-and-is-vulnerable-to-attacks-f)\n\nAs of now, Molly [lastest release](https://github.com/mollyim/mollyim-android/releases) was in 31 July (Version v8.19.2-4).\n\nIt contains vulnerabilities that had been simply fixed in mainline Signal.\n\nTake for example the [latest exploit disclosed in October](https://www.privacyguides.org/news/2026/10/22/signal-vulnerability-allow-audio-and-possibly-video-to-continue-after-hanging-up/), it has been fixed in Signal 8.27. [1](https://aboutsignal.com/news/signal-fixes-bug-that-could-affect-ending-calls-on-android/). Meanwhile Molly remains vulnerable.\n\nIt’s currently recommended to use mainline Signal and delete Molly till they at least return to updating their app adequately, if they ever will.\n", "dateCreated": "2026-10-31T15:15:45.849013716+00:00", "date_created": "2026-10-31T10:23:41+00:00", "date_modified": "2026-10-31T10:23:41+00:00", "date_published": "2026-10-31T10:23:41+00:00", "description": "cross-posted from: https://piefed.world/c/ysk/p/1503393/ysk-molly-signal-fork-has-not-been-updated-since-3-months-and-is-vulnerable-to-attacks-f As of now, Molly lastest release was in 31 July (Version v8.19.2-4). It contains…", "external_url": "https://piefed.world/post/1503394", "git": { "commit": "20068632b65d2830a2d54f25ca1d90d697bea2c0", "path": "items/hnrss-org/2026/10/2026-10-31-molly-signal-fork-has-not-been-updated-since-3-months-and.md", "permalink": "https://github.com/aymericbeaumet/aggr-instance/blob/20068632b65d2830a2d54f25ca1d90d697bea2c0/items/hnrss-org/2026/10/2026-10-31-molly-signal-fork-has-not-been-updated-since-3-months-and.md" }, "id": "urn:aggr:item:8803a3788d17c2aa21d87bbbebe7bcc02681db3e", "isBasedOn": { "@id": "https://piefed.world/post/1503394" }, "mainEntity": { "@id": "https://piefed.world/post/1503394", "@type": "CreativeWork", "archivedAt": { "@id": "https://aggr.aymericbeaumet.com/items/hnrss-org/2026-10-31-molly-signal-fork-has-not-been-updated-since-3-months-and/#webpage" }, "author": [ { "@type": "Person", "name": "DeepLogin" } ], "dateModified": "2026-10-31T10:23:41+00:00", "datePublished": "2026-10-31T10:23:41+00:00", "headline": "Molly(Signal fork) has not been updated since 3 months and is vulnerable", "image": { "@type": "ImageObject", "caption": null, "height": 90, "url": "https://piefed.world/static/images/piefed_logo_full_t_300x300.svg", "width": 160 }, "timeRequired": "PT1M", "url": "https://piefed.world/post/1503394", "wordCount": 95 }, "name": "Archived snapshot: Molly(Signal fork) has not been updated since 3 months and is vulnerable", "preview": { "alt": null, "color": null, "height": 90, "placeholder": { "data_url": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNk+A8AAQUBAScY42YAAAAASUVORK5CYII=", "hash": "" }, "url": "https://piefed.world/static/images/piefed_logo_full_t_300x300.svg", "width": 160 }, "reading_minutes": 1, "replicated_at": null, "source": "hnrss-org", "source_name": "Hacker News: Front Page", "summary": null, "tags": [], "temporalCoverage": "2026-10-31T15:15:45.849013716+00:00", "title": "Molly(Signal fork) has not been updated since 3 months and is vulnerable", "url": "https://aggr.aymericbeaumet.com/items/hnrss-org/2026-10-31-molly-signal-fork-has-not-been-updated-since-3-months-and/", "word_count": 95 }