Follow
@resist_berlin_@chaos.social
No, giphy doesn't know who is issuing requests for gifs since they are proxied through signal.
https://signal.org/blog/giphy-experiment/
@syster
This reminds me of those infamous image magick remote code execution exploits. As moxie said, if gifs or images had this vulnerability its cosequences vastly preceed Signal
@resist_berlin_@chaos.social
@nikolal @resist_berlin_
I could imagine having microdots placed within the gifs, and something like android or some fb app listening to it could be enough for tracking.
Images have this vulnerability.
@nikolal @resist_berlin_
question that remains for me:
how can facebook possibly track signal users through injections into the gifs.
afaik, signal has nothing that would prevent such an attack.
Moxie's privacy guaranty:
"hope"