The everywhere.computer guy.

Also known for /unglish (unglish.co.uk), the Secure Design WG, WalletUncon, Causal Islands and drumming in all-genre power trios.

Clients (including Warpcast) should proxy embedded images through their infrastructure. I don't think there's a protocol-level change to address this issue, but the protocol docs should probably point this privacy risk out. Do you see a different approach?

I think this would be a fine fix for the issue I currently see. I can't really endorse Warpcaster with usage while the Frame leakage of IP addresses to strangers is ongoing.

A matter of time before a script kiddie spams notifs to harvest IPs and port scan for easy crypto victims.

Hmu on X/Bluesky once fixed pls.

co founder of @metamask . Making computers behave for us.