Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform


https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117

200$ reward for a 0-click vulnerability that leaks the approximate location of virtually anyone in the world is wild

Working on Farcaster and Warpcast. Longer thoughts at https://dwr.email

Cybersecurity & InfoSec

TL;DR – by making your device download a unique CDN resource (such as sending a Discord friend request notification with a unique PFP), an attacker could guess which data centers you're closest to by enumerating their caches. Pretty smart.

Keep your VPNs on, folks.

https://warpcast.com/francos.eth/0x0b249dcf

TL;DR

https://warpcast.com/darrylyeo/0xf4fbb313

Any sign of this in the wild or just his claim?