[zooko_LeastAuth]

Speaking of the vulnerabilities that our team found, here is our blog post about it and a link to our report and the github issue tickets that we opened: Here is our blog post about our audit of Cryptocat, which was also announced today: https://leastauthority.com/blog/

[tptacek]

There is great stuff in here, including the CTR nonce reuse bug that Nadim wrote about earlier. Ouch.

[zooko]

Thanks! I'm very proud of our work in this audit.