>Imagine sharing a gif in Signal and still being tracked by Facebook because every person that loads it needs to first download it from FB servers.
Signal's integration is specifically engineered to _not_ do this: https://signal.org/blog/signal-and-giphy-update/
From Giphy's end they can still so useful traffic analysis by generating a unique URL for the search result obtained by User A and subsequently sent to his chat cohort. Each cohort app retrieving the same URL could then be enumerated. It's not user-identifying but it would generate a sort of contact graph.
Also the Signal service could do a transparent TLS MitM between the app and Giphy instead of a passthrough TLS tunnel and the user apps would be unaware. In fact from that page I'm not sure they're even doing a tunnel anyway.
Re:Facebook to Buy Giphy for $400M
by ccktlmazeltov on Friday May 15, 2020 @09:24PM
(#23199570)
nice try, but this wouldn't work
It really is getting to the point that if you want privacy, don't touch anything owned by the top 5 tech companies. Better yet, only use Open Source. I never used to be a OSS only person, but the past few months I've started to go that way.