30 ms·
Woah, that's a great point. Imagine sharing a gif in Signal and still being tracked by Facebook because every person that loads it needs to first download it fr
by Thorentis 6y ago
Woah, that's a great point. Imagine sharing a gif in Signal and still being tracked by Facebook because every person that loads it needs to first download it from FB servers.
It really is getting to the point that if you want privacy, don't touch anything owned by the top 5 tech companies. Better yet, only use Open Source. I never used to be a OSS only person, but the past few months I've started to go that way.
- firloop 6y ago>Imagine sharing a gif in Signal and still being tracked by Facebook because every person that loads it needs to first download it from FB servers. Signal's integration is specifically engineered to _not_ do this: https://signal.org/blog/signal-and-giphy-update/ https://signal.org/blog/signal-and-giphy-update/
- dingaling 6y agoFrom Giphy's end they can still so useful traffic analysis by generating a unique URL for the search result obtained by User A and subsequently sent to his chat cohort. Each cohort app retrieving the same URL could then be enumerated. It's not user-identifying but it would generate a sort of contact graph. Also the Signal service could do a transparent TLS MitM between the app and Giphy instead of a passthrough TLS tunnel and the user apps would be unaware. In fact from that page I'm not sure they're even doing a tunnel anyway.
- ccktlmazeltov 6y agonice try, but this wouldn't work