#ShowerThought

small circle 🕊 in calmness

First time I reflect on how @matrix sessions list on someone's profile has a weird #privacy-infringing text format that also makes it less secure.

> "Oh, let's see. This person is using Ubuntu and Chrome. Oh and this immature client that has a known bug. Let's see what the next person uses. Oh wait.. I'll automate that scraping with my troll farm's #PII scrapers."

Is this a weird observation of mine?

lucas ∞

@smallcircles @matrix I didn't ever notice this text for anyone outside of myself. For other people it just shows a random ID, probably a public key.

small circle 🕊 in calmness

This post is deleted!

small circle 🕊 in calmness

@lucasmz @matrix

Here a random pick of a random person in a random chatroom that has some interesting info.

There are some people in the chatroom where ALL sessions are nondescript ID's as one would expect.

Robin Riley

@smallcircles @matrix not weird imo! I generally try to configure my software not to broadcast what I'm using, or at least not the specific version number, whether it's a Matrix client or a web server.

small circle 🕊 in calmness

@robin @matrix

It is at least weird that these choices are made with the general unawareness or consent of the end-user. I got surprised reaction from other people I mentioned about this. Maybe matrix is security-first in the protocol and the app devs or instance admins decide to make it more lax. But the protocol might also enforce the secure by default impl. Merely wondering as I'm certainly not the expert