Re:Unsolicited messages on Keybase
by Gaelan on Tuesday December 10, 2019 @01:19AM
(#21750124)
It looks like Keybase is using mobile.twitter.com. I just ran `sudo tcpdump -x host mobile.twitter.com` while browsing to ahnick's profile in the Keybase app on my Mac, and got a flurry of activity. It doesn't seem to do that if I just start a chat, however—it only happens if I pull up his profile (i.e. the screen that lists his Twitter account).
[ Parent
| on HN ]
I confirmed that the keybase desktop client also seems to be using mobile.twitter.com when I was scanning with wireshark. I know it is executing when going to the profile and it may be executing certain times a chat is initiated, but I'm unable to locate in the code base where this is occurring for chat. For the profile the code location for the client desktop appears to be here -> https://github.com/keybase/client/blob/master/shared/actions...
I guess it's good to know that it checks it in response to random actions, even if not when establishing a self-proclaimed end to end encrypted chat :P
Btw mobile.twitter.com is also hosted in their own range (104.244.40.0/21), so I would have spotted that if it had been contacted when I tested it.