@resist_berlin_@chaos.social No, giphy doesn't know who is issuing requests for gifs since they are proxied through signal. https://signal.org/blog/giphy-experiment/
@nikolal@resist_berlin_ question that remains for me: how can facebook possibly track signal users through injections into the gifs. afaik, signal has nothing that would prevent such an attack.
@syster This reminds me of those infamous image magick remote code execution exploits. As moxie said, if gifs or images had this vulnerability its cosequences vastly preceed Signal @resist_berlin_@chaos.social
@nikolal@resist_berlin_ I could imagine having microdots placed within the gifs, and something like android or some fb app listening to it could be enough for tracking. Images have this vulnerability.
@nikolal @resist_berlin_
I could imagine having microdots placed within the gifs, and something like android or some fb app listening to it could be enough for tracking.
Images have this vulnerability.