Skip to content

Creation of group leaks name and included numbers to participants before any message is sent #1725

@kannes

Description

@kannes

I created a group just to test how creating a group works. I added some random contacts that showed as TextSecure users. Then I decided, ok, creating groups works and went on with my day.

Later I received a message from one of the users, inside the group, asking about the purpose of this group.

At no point did TextSecure indicate or warn that the mere creation of a group was a "transferred" action. This lead me to leak the numbers of completely unrelated strangers to each others.

Please add a warning or dialog that a group is immediately communicated to all participants, even with no message(s) sent.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions