We don't store any info server-side like a full name or avatar icon, so app needs access to resolve those from addr book
-
-
It's a simple Q: Do you or do you not send or store any information derived from the address book to a server?
1 reply 1 retweet 1 like -
Yes, truncated hash lookups are transmitted. Never stored.
1 reply 3 retweets 2 likes -
OK! Now can these truncated hashes be inverted back into telephone numbers?
1 reply 4 retweets 3 likes -
Replying to @marshray
@thorsheim@whispersystems@letoams Of course they can.2 replies 1 retweet 5 likes -
Replying to @matthew_d_green
Thanks,
@matthew_d_green that was my point.@thorsheim@whispersystems@letoams2 replies 0 retweets 1 like -
Forgive my ignorance, arent trunc'd hashes supposed to induce collisions to make invert hard?
3 replies 0 retweets 5 likes -
It could. But then you need another phase to eliminate those collisions. And that has to involve phones.
2 replies 2 retweets 1 like -
Replying to @matthew_d_green
NB
@matthew_d_green these are phone numbers ~2^32 possible in US You'd have to truncate to much smaller than this to get collision@taviso1 reply 0 retweets 0 likes -
And I'm betting they don't do that.
1 reply 0 retweets 0 likes
I've never used it, I was just talking about the properties of truncated hashes.
-
-
Replying to @taviso @matthew_d_green
Ditto & theorising that even a truncated hash of a phone number is a bad idea. What would be a good idea I wonder?
0 replies 0 retweets 0 likesThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.