Matthew Garrett on Nostr: Anyone using the Feeld dating app should be aware that it performs client-side ...
Anyone using the Feeld dating app should be aware that it performs client-side filtering - returned responses that are marked "Status: HIDDEN" will be invisible in the UI but visible in the UI response. I reported the original and most egregious example of this over 90 days ago and that was fixed, but there's at least one remaining case where data is leaked that shouldn't be.
Published at
2024-08-01 03:41:01Event JSON
{
"id": "d3a69670a4d03f13f3487d60d919591ecee9c7bb1d69e35b32b0f0cd0bbbd84a",
"pubkey": "90526f218e9e8ff28dc76e5348fedf9390f233c9994ab0344624f47b28a13a36",
"created_at": 1722483661,
"kind": 1,
"tags": [
[
"proxy",
"https://nondeterministic.computer/@mjg59/112884689218770250",
"web"
],
[
"proxy",
"https://nondeterministic.computer/users/mjg59/statuses/112884689218770250",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://nondeterministic.computer/users/mjg59/statuses/112884689218770250",
"pink.momostr"
],
[
"-"
]
],
"content": "Anyone using the Feeld dating app should be aware that it performs client-side filtering - returned responses that are marked \"Status: HIDDEN\" will be invisible in the UI but visible in the UI response. I reported the original and most egregious example of this over 90 days ago and that was fixed, but there's at least one remaining case where data is leaked that shouldn't be.",
"sig": "5caed0de2abd406eb3673b3a13192893f028e19798c8902975b077779b96db4779fe18b189bc2478bceb8e5cd1fe15837a8e5d9ae437c197ac1bcd41b3ef76dd"
}
