Hacker News Reader

Woah, that's a great point. Imagine sharing a gif in Signal and still being tracked by Facebook because every person that loads it needs to first download it from FB servers.

It really is getting to the point that if you want privacy, don't touch anything owned by the top 5 tech companies. Better yet, only use Open Source. I never used to be a OSS only person, but the past few months I've started to go that way.

View on HN

>Imagine sharing a gif in Signal and still being tracked by Facebook because every person that loads it needs to first download it from FB servers.

Signal's integration is specifically engineered to _not_ do this: https://signal.org/blog/signal-and-giphy-update/

From Giphy's end they can still so useful traffic analysis by generating a unique URL for the search result obtained by User A and subsequently sent to his chat cohort. Each cohort app retrieving the same URL could then be enumerated. It's not user-identifying but it would generate a sort of contact graph.

Also the Signal service could do a transparent TLS MitM between the app and Giphy instead of a passthrough TLS tunnel and the user apps would be unaware. In fact from that page I'm not sure they're even doing a tunnel anyway.

nice try, but this wouldn't work

Reply on news.ycombinator.com