Zerodium acquiring zero-days in Pidgin, an IM client popular with cybercriminals

therecord.media

8 points·______-··9 comments

Open articleView on HN

Relevant thread from yesterday: https://news.ycombinator.com/item?id=27371612

Oh no, my child uses this and uses software called “Quake.” Is my child at risk of having the FBI involved?

Yeah, framing Pidgin as an "IM client used by (cyber)criminals" goes a bit too far...

Everything can be mis-used by anyone.

Well, if your kid is using Kali Linux then maybe https://twitter.com/G_IW/status/1227700420178567170

I get the point, but the title is really poor.

You should instantly unplug your modem and delete any diskmags found on the hard drive. They cannot recover any information, this is imperative.

"But while the Pidgin app has its legitimate use cases, it is almost a given that Zerodium’s interest in acquiring Pidgin zero-days comes from the app’s broad use in the cybercriminal underground."

"Well, it has legitimate use cases..."???

From the rest of the article, Zerodium ought to be looking for zero-days in the rest of the Jabber environment.

> an IM client popular with cybercriminals

Sure ... in the same way facebook and google is popular with cybercriminals

I use pidgin for reading SMS messages on my phone. TIL I'm among cybercriminals.

Holy smokes what a terroristic article.

Reply on news.ycombinator.com