Update 'README.md'

README.md

@@ -129,6 +129,12 @@ Glad you asked!! HushChat adds various layers of privacy on top of our "base" Hu
   * HushChats cannot be truncated, removed, reordered, duplicated or modified without being detected
     * There are very strong encryption/decryption guarantees provided by libsodium secretstreams: https://doc.libsodium.org/secret-key_cryptography/secretstream
 
+## Signal Vulnerabilities
+
+https://restoreprivacy.com/timing-attacks-on-whatsapp-signal-threema-reveal-user-location/
+
+HushChat is not vulnerable to the above vulnerability because there are no delivery receipts in HushChat protocol. When Alice sends a message to Bob, she has no idea if or when it's ever delivered to Bob's wallet or if he reads it. This is a feature, not a bug.
+ 
 ## Where can I learn more?
 
 Join us on [Telegram](https://hush.is/telegram) or our [Telegram Support](https://hush.is/telegram_support) channels.