jeremy on Nostr: It's trivial to craft a custom tracking pixel and send to anyone as a DM. Most ...
It's trivial to craft a custom tracking pixel and send to anyone as a DM. Most clients today will fetch the image without a second thought. Damus will blur the image from anyone you don't follow--but it still fetches it.
Of course this shits happens elsewhere, too. This is why Gmail will proxy images for you, and gives you the option to disable automatic loading:
https://support.google.com/mail/answer/145919Published at
2023-01-10 13:37:17Event JSON
{
"id": "85c2fc4fe505418c04fe28cbf3f6688eee2ba6f1bcd824d688bc1c6a60c5a295",
"pubkey": "b8f0f79c1688d8bcf16f333a2c5617a2c3935469cbbd4ece398856b1a3f7eee0",
"created_at": 1673357837,
"kind": 1,
"tags": [
[
"e",
"73388ffd6d5f7ef4d473057e8358ac525f31bb69223b19b9f6b8953e3ac87764",
"wss://relay.damus.io",
"root"
]
],
"content": "It's trivial to craft a custom tracking pixel and send to anyone as a DM. Most clients today will fetch the image without a second thought. Damus will blur the image from anyone you don't follow--but it still fetches it.\n\n\nOf course this shits happens elsewhere, too. This is why Gmail will proxy images for you, and gives you the option to disable automatic loading:\n\n\nhttps://support.google.com/mail/answer/145919",
"sig": "8d4f9506273c1fceca716e2ab16193a2d064cd12673866df7e16d44502b658131074fbb02c9a88ba113c2052b5455bdc16d8820ee71bdc9d7670676f7b5baa21"
}