Post #3145166
2025-01-21 22:20 UTC
In other words, it's not great that this is possible, but nowhere near an immediate and present danger to anyone except a very very small group of people doing very very specific things.
If you're in that group, you'd already known you are. You'd have someone to ask about this. And you'd almost certainly be using some other tools to anonymize yourself anyway.
If that's not the case, then this is almost certainly not something to lose sleep over. Signal remains a safe choice of a secure IM. 👍
Replies (2)
-
@rysiek@mstdn.social 2025-01-21 22:25
If you are still worried about this, my read of it is that these things might make the attack more difficult: 👉 turn off automatic downloading of media files This makes this attack rely on you clicking the image to download it, making it very difficult for the attacker to know when to check for the cached status of the resource. This is important, because for each attachment the attacker can only ask this question once per the period Cloudflare caches these resources (not sure exactly).
-
@INIT6@infosec.exchange 2025-01-21 22:49
@rysiek@mstdn.social I've already used it to track down a person threatening the life of a child. :ablobcatrainbow: