2025-08-20 01:16 UTC
As I began reading the code and watching the discord conversations around meshtastic security I began to realize this team simply did not value security design and were rejecting all feedback short of full blown demos of these WELL documented security lapses.
I supported a friend with research who tried for months to get through to the meshtastic devs via discord (bc the github issues were being closed) and frankly the MT team were egotistical, rude and completely disinterested in security.
Replies (1)
-
@nullagent@partyon.xyz 2025-08-20 01:19
By January of this year I had run out of personal interest and free resources to devote to the project of meshtastic given the lack of security focus I'd seen in the prior six 6 months. I wrote a final writeup on my meshtastic experiences and wrote a complete listing of the security issues I and others had already informed meshtastic of at that time. My last post on the topic fully outlined the PKI poisoning we demo'd a DEFCon's CTF back in January of 2025. https://partyon.xyz/@nullagent/113862707600980520