Re: IQ Handling vulnerabilities

Am 07.02.2014 16:57, schrieb Kevin Smith:

> There are various unlikely (and arguably unimportant, I suppose)
> issues around being able to observe where in a stream a client is. As
> an incredibly contrived example, client A shows client B an id that
> means "You are the first person I'm sending a message to this session"
> and user A says to user B "I'm busy chatting to C in another window".

I would call that information leaks but not vulnerabilities. So 
predictable IDs and resource names might lead to some information leaks, 
but not checking the from is a vulnerability.

Regards,

Alexader Holler