phil pfp
phil
@phil
Spam NFTs aren't just annoying; they're nefarious. Since many wallets automatically index and display new NFTs, bad actors can use tracking pixels in the NFT thumbnail metadata to scrape the time and IP address whenever you open your wallet. Avoid NFT autodetection!
16 replies
21 recasts
107 reactions

Dan Finlay 🦊 pfp
Dan Finlay 🦊
@danfinlay
Thank you for recognizing this. It’s been a moloch race to the bottom for wallets to try to highlight their aggressive detection as a feature, only to put users at greater risk. It scares me that the lack of user awareness will create a market that selects for insecure but expected behavior.
1 reply
1 recast
7 reactions

Dan Finlay 🦊 pfp
Dan Finlay 🦊
@danfinlay
An interesting side effect of that risk seems to be the implication that it may not be possible to keep users safe for reasons they don’t understand (or there’s a limit to that type of safety), and the market drags the design space toward zeitgeist speed: bring everyone’s awareness, or go nowhere.
0 reply
1 recast
4 reactions