News for hackers. Stuff that matters.

A comment on Twilio incident: What Signal users need to know. Parent comment

Re:Twilio incident: What Signal users need to know by spurgu on Monday August 15, 2022 @02:09PM (#32473206)
> I have yet to see an explanation for why Signal can use phone numbers from a client-side contact list, but not email addresses from a client-side contact list

OS functionality? There no "Grant access to Gmail contacts" (= email addresses) on Android/iOS, so that client-side list would have to be manually maintained, while (practically) everyone already has a contact list containing phone numbers of their friends.

That said I don't see why a user would have to have a stored social network at all, why can't it simply be opt-out?

[ Parent | on HN ]
Re:Twilio incident: What Signal users need to know by teraflop on Monday August 15, 2022 @02:21PM (#32473361)
At least on Android, any application that I give permission to access my contact list can see email addresses for the client-side contacts that are synced with my Gmail account. Maybe iOS behaves differently?
[ Parent | on HN ]