News for hackers. Stuff that matters.
Re:0click deanonymization attack targeting Signal, Discord a... by anon-3988 on Tuesday January 21, 2025 @10:26AM (#42781124)
Step 2: If you use Discord, don't allow invites from _anyone_.

Its quite bizarre why social media apps allow anonymous people to interact with you. 99% of the conversation I have is with people that I roughly know.

Re:0click deanonymization attack targeting Signal, Discord a... by im3w1l on Tuesday January 21, 2025 @10:34AM (#42781222)
Discord is for gamers and quite a lot of people will be playing a game and tell someone "add me on discord my tag is xyz". Not allowing invites would seriously cut into the usability.
Re:0click deanonymization attack targeting Signal, Discord a... by Marsymars on Tuesday January 21, 2025 @11:05AM (#42781657)
You could have it so both people have to add each other before there's any indication that either person added the other.

No extra work for person A, and the work for person B is just what person A had to do anyway.

Re:0click deanonymization attack targeting Signal, Discord a... by mplewis on Tuesday January 21, 2025 @01:49PM (#42783814)
This is mostly unusable for what should be obvious reasons.
Re:0click deanonymization attack targeting Signal, Discord a... by Marsymars on Tuesday January 21, 2025 @03:25PM (#42784806)
I'm... not actually clear on what those reasons are? For the adder, the experience is exactly the same - the only difference is that there's no longer an adder and an addee - instead there are two adders.
Re:0click deanonymization attack targeting Signal, Discord a... by ziddoap on Tuesday January 21, 2025 @10:31AM (#42781183)
>Its quite bizarre why social media apps allow anonymous people to interact with you.

I mean, it's one of Discord's major use-cases. Joining a server of a common interest and meeting/talking with other people that share that interest.

Re:0click deanonymization attack targeting Signal, Discord a... by high_na_euv on Tuesday January 21, 2025 @10:35AM (#42781236)
So, how would you start interacting with your friends if you just created account?

>anonymous people

Wtf, how is this even relevant?

Re:0click deanonymization attack targeting Signal, Discord a... by anon-3988 on Tuesday January 21, 2025 @11:04AM (#42781642)
You can add them by creating a unique, temporary UUIDs/links that they can use?

You know them from somewhere else, lets say I play a game and we decided to get into a voice chat. We could create a temporary, dynamically created voice chat that we can all join (much like Google Meet) where all of us are anons.

Then, if we really want to know each other, we can then share the UUIDs.

I understand why ANYONE can send an email to me (I can decide when/will to check them)

I don't understand why ANYONE can whisper to my ears (I cant decide since they are pushed to the top of the app)

Re:0click deanonymization attack targeting Signal, Discord a... by mplewis on Tuesday January 21, 2025 @01:51PM (#42783829)
Adding this level of friction to the process is not viable for a messaging platform whose bread and butter is connecting with friends.
Re:0click deanonymization attack targeting Signal, Discord a... by udev4096 on Tuesday January 21, 2025 @12:20PM (#42782712)
Just don't use it. Expecting privacy and security from a literal keylogger. Who in their right mind uses a plain-text messaging app in 2025?
Re:0click deanonymization attack targeting Signal, Discord a... by zolland on Tuesday January 21, 2025 @04:19PM (#42785317)
How is Discord a key logger?
Re:0click deanonymization attack targeting Signal, Discord a... by mplewis on Tuesday January 21, 2025 @01:49PM (#42783808)
Most people, actually.
Re:0click deanonymization attack targeting Signal, Discord a... by Bluescreenbuddy on Tuesday January 21, 2025 @03:38PM (#42784937)
If you're worried about anonymity and you're using discord, you're failing. It's not made for that.
Re:0click deanonymization attack targeting Signal, Discord a... by squigz on Tuesday January 21, 2025 @03:45PM (#42784994)
> Its quite bizarre why social media apps allow anonymous people to interact with you

Bit strange to attribute this to 'social media apps', isn't it? I'm interacting with an anonymous person right now. Most platforms allow it, including the older ones (i.e., IRC)