davep, 7 months ago

@adam Any feedback on this, @Mer__edith ? 🙏

davep, 7 months ago

@adam @Mer__edith

May be FUD.

image/png

mathieui, 7 months ago

@davep @adam @Mer__edith it would make sense for a vulnerability to be in the preview fetcher (since it is the only time signal will interact with arbitrary content from other servers), this does not mean being sent a preview can trigger the bug (hopefully the "rich" content is sanitized both ways)

adam, 7 months ago

And yes, link previews are on by default.

I don't know why they thought that was a safe default. You'd have to ask the Signal Foundation about that.