Toot

Written by Michał "rysiek" Woźniak · 🇺🇦 on 2025-01-21 at 22:33

Technical details tl;dr:

• Signal (and other communication platforms) uses Cloudflare with caching enabled for media

• one can check on which Cloudflare endpoints a given attachment URL got cached (one can use a VPN for this), giving them the ability to roughly geolocate users whose Signal downloaded the file

• a doctored version of Signal (or whatever app) allows the attacker to send the message with an image, and extract the attachment URL to know what URL to check for having been cached

=> More informations about this toot | View the thread | More toots from rysiek@mstdn.social

Mentions

Tags