• poolcritter@pawb.social
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 hours ago

    Tuwunel should not be recommended to new users.

    Keep in mind the claim of being official is not true: this is a claim by one of the former co-maintainers of conduwuit, to claim legitimacy over other projects like continuwuity. Additionally, tuwunel’s maintainer has openly made threats against the maintainers of continuwuity, aswell as being formally banned from the foundation for actively abusing protocol exploits. I’m not sure I’d trust a project primarily maintained by them for these reasons. Additionally, it’s maintainer appears to currently also be pushing for publishing how to exploit the security vulnerabilities from the upcoming security release.

    aur tuwunel-git, corroborated by nex (CoI: continuwuity maintainer; has received death thrrats from tuwunel developers) in #offtopic:continuwuity.org a few upgrades ago

    • dan@upvote.au
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      3 hours ago

      I don’t usually get involved in internet drama so I wasn’t aware of this.

      I started with Conduit. I hit some bugs though, and development was very slow. I looked at all the forks. Conduwuit was the most active, and all the issues I had were solved, so I used it. It got archived because of some other internet drama, and the readme said to use Tuwunel instead, which is what I’m using now.

      Should I use something else?

      I dunno. Use whatever I guess, as long as it’s not Synapse.