The #Freedom #Phone is not great at #privacy

source: https://mjg59.dreamwidth.org/59479.html

The final thing, though? They've extended Signal's invitation support to encourage users to get others to sign up for Clear United. There's an exposed API endpoint called "get_user_email_by_mobile_number" which does exactly what you'd expect - if you give it a registered phone number, it gives you back the associated email address. This requires no authentication. But it gets better! The API to generate a referral link to send to others sends the name and phone number of everyone in your phone's contact list. There does not appear to be any indication that this is going to happen.

#fail #smartphone #signal #messenger #security #technology #news #Android #ClearOS #ClearUnited