"Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform"
worth the read
https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117
> Signal instantly dismissed my report, saying it wasn't their responsibility and it was up to users to hide their identity: "Signal has never attempted to fully replicate the set of network-layer anonymity features that projects like Wireguard, Tor, and other open-source VPN software can provide".
Wow.
what is signal supposed to do about it? bully cloudflare into doing things differently? switch to another caching solution with similar issues? signal is an e2e encryption application. they never said they were decentralized or hid users identity beyond what they can control in their app.
