diff --git a/ToxComparedWithOtherIm.md b/ToxComparedWithOtherIm.md
index bb7d67f..4f13343 100644
--- a/ToxComparedWithOtherIm.md
+++ b/ToxComparedWithOtherIm.md
@@ -11,9 +11,11 @@ Relaunched as <https://github.com/blueprint-freespeech/ricochet-refresh>
 * no group chat
 * can't use system Tor - only its own
 * didn't see any mobile apps
+* Had a [vulnerability](https://thehackernews.com/2016/02/ricochet-secure-messenger.html) with [HTML in invites](https://ricochet.im/files/ricochet-ncc-audit-2016-01.pdf)
 
 ## briar
 
 https://code.briarproject.org/briar/briar-desktop/
 
-Uses Tor.
+* written in Java
+* Uses Tor.