Post #3145201

@rysiek@mstdn.social Not to mention, from what I see this is kinda "easy" to fix if it's a journalist or other high-tier person: 1. Zero-click is based on push notifications, which can be disabled/show only name not actual content 2. In Signal settings you can turn off automatic download of Media files, which will mitigate the 1 click aspect too (Will still work after downloading file itself tho) And as always, if your thread model is high enough, you def should use VPN or TOR For regular users this doesn't really do much harm, assuming you don't have attackers specifically targetting you, and even if you did, cloudflare datacenters aren't much reliable source of exact location (author himself said ~250 miles radius). I still think this is an very interesting finding, and I believe signal should actually try to mitigate this somewhat instead of just saying it's not their responsibility, but I don't believe this is that severe.