Research into a unique 0-click deanonymization exploit targeting Signal, Discord and hundreds of platform 🧵

keyboard_arrow_left Previous keyboard_arrow_right Next

gist.github.com/hackermondev/4…

@hackermondev Nice work! One critique: Your “How to protect yourself” section really doesn’t contain any such info. I would have expected at least a mention of Tor & VPN, especially deployed via gateway devices. Similar to the advice that Signal had suggested.

@hackermondev Very interesting work!

@hackermondev This technically applies to any URL provided through Cloud flare transmitted via any means/platform to any anonymous target. Low resolution but useful enough for LE to figure out which government to connect with to further investigate, assuming the target doesn't tunnel/use VPN

@hackermondev Very interesting..

@hackermondev Very interesting research!

@hackermondev Let there be mass d0xings.

@hackermondev this is really cool

@hackermondev So cool research! Thanks for sharing

@hackermondev Another reason why VPN/Tor is good! Regardless leaking cache data location is bad, but how do you know the Signal's cache URL? Does it get send back to the uploader? That would be unnecessary right?

@hackermondev Interesting read Daniel! Thanks for sharing.

@hackermondev impressive

@hackermondev Very impressive and especially well written!

@hackermondev Epic work