GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Joseph Cox (josephcox@infosec.exchange)'s status on Wednesday, 22-Jan-2025 06:28:38 JSTJoseph CoxJoseph Cox

    A bug in Cloudflare (and just the nature of how CDNs work) let an attacker learn the broad location of Discord, Signal, Twitter users by just sending them an image, according to a security researcher. It works because you can then check which Cloudflare data center cached the image https://www.404media.co/cloudflare-issue-can-leak-chat-app-users-broad-location/

    In conversationabout a month ago from infosec.exchangepermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: www.404media.co
      Cloudflare Issue Can Leak Chat App Users' Broad Location
      from @josephfcox
      A security researcher made a tool that let them quickly check which of Cloudflare's data centers had cached an image, which allowed them to figure out what city a Discord, Signal, or Twitter/X user might be in.
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.