CloudFlare has the actual IP address that viewed the image. Which means some pow... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		bufferoverflow 7 months ago \| parent \| context \| favorite \| on: 0-click deanonymization attack targeting Signal, D... CloudFlare has the actual IP address that viewed the image. Which means some powerful (or rich enough) actors can get it. This is very very bad.

cthalupa 7 months ago [–]

This was... always, the case though? For any CDN service? How do you serve traffic to people without knowing where to send it?

endofreach 7 months ago | | [–]

Agree. Though a valid concern might be that a victim uses signal because of E2EE, thinking no 3rd party involved in delivery, not knowing/thinking about a CDN used.

bufferoverflow 7 months ago | | [–]

Onion protocol.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact