News for hackers. Stuff that matters.

A comment on Twitter says an attacker used its API to match usernames to phone numbers. Parent comment

Re:Twitter says an attacker used its API to match usernames ... by londons_explore on Thursday February 06, 2020 @02:45AM (#22254252)
It is possible on Android, but if you do, you can't initiate any conversation - the remote party has to speak first.
[ Parent | on HN ]
Re:Twitter says an attacker used its API to match usernames ... by zrm on Thursday February 06, 2020 @11:25AM (#22257339)
We did try that and it supposedly claimed to the other party that I didn't have the app installed. Not that that would have been a scalable solution anyway, since then no pair of people could use it unless one of them gave it all their contacts.

Meanwhile the option remains available to use a different app that doesn't behave that way.

[ Parent | on HN ]