A little known fact is that Uber also does this, or at least used to. On iOS when you try to copy a link to follow your trip it first asks for contacts permissions with a bullshit reason - declining doesn't have any ill effects but obviously it's designed to try and catch users off-guard or make them think it's mandatory and I guess a lot of people do submit.
Clubhouse uploads all your contacts
21–30 of 33 posts
Re: Clubhouse uploads all your contacts
#22Earlier quoted context omitted.
I'm assuming signal is following best practice. How else could one match contacts without uploading some contact data?
There is no need to upload or match contacts in this case. It is a required step for inviting a new user. The invite SMS is even sent from the device, not by Clubhouse.
Oh! I see. I was thinking of matching users in your list with those already on the platform. In this case, that means N number of user already sent their contact list to clubhouse and club house is keeping and using that data.
Re: Clubhouse uploads all your contacts
#23It would actually be a neat UI to show the person's contacts letting the person pick which one to try with a "match the hash" function that shows the one way hash generated and does a "ping" on the service to see if someone matches.
Won't happen, but would be a fun UI to do.
Re: Clubhouse uploads all your contacts
#24Earlier quoted context omitted.
Sadly, it doesn't seem so. The fact that there is no clear place to do this is honestly quite ironic given that Apple requires all third-party apps to have an easy way to report rulebreaking content…
There is actually! I was told about it over the phone with an App Review rep a few weeks ago. I didn't write it down unfortunately, but I think it was appreview@apple.com - googling for that e-mail address returns some results, so I am pretty positive that was it.
I just sent them an email. Other developers should too because everyone should play by the same rules.
Re: Clubhouse uploads all your contacts
#25A little known fact is that Uber also does this, or at least used to. On iOS when you try to copy a link to follow your trip it first asks for contacts permissions with a bullshit reason - declining doesn't have any ill effects but obviously it's designed to try and catch users off-guard or make them think it's mandatory and I guess a lot of people do submit.
I think there should be dark patterns and ... darkest patterns.
Re: Clubhouse uploads all your contacts
#26This is not Clubhouse.io but joinClubhouse.com, an invite-only zoom/gather.town alternative for organising events. I have a few friends in San Francisco using it but doesn't look like it's well-known outside the circle.
Think they've been growing a lot in the recent months and getting more popular.
Curious what is the legal implication from a privacy perspective if they are only uploading the hashes.
Re: Clubhouse uploads all your contacts
#27And so does every other social media platform. Signal does so with hashes ( https://support.signal.org/hc/en-us/articles/360007061452-Do... ), but there's so few phone numbers that it would be trivial to brute force or rainbow table all the possible values.
Public, the stock trading app does this as well. Same interface (your contact has x friends) but it seems this is a growing, and worrisome trend.
Re: Clubhouse uploads all your contacts
#28This is not Clubhouse.io but joinClubhouse.com, an invite-only zoom/gather.town alternative for organising events. I have a few friends in San Francisco using it but doesn't look like it's well-known outside the circle. Think they've been growing a lot in the recent months and getting more popular. Curious what is the legal implication from a privacy perspective if they are only uploading the hashes.
Thanks for clarifying that. I've got a generally good opinion of clubhouse.io and was concerned.
Re: Clubhouse uploads all your contacts
#29And so does every other social media platform. Signal does so with hashes ( https://support.signal.org/hc/en-us/articles/360007061452-Do... ), but there's so few phone numbers that it would be trivial to brute force or rainbow table all the possible values.
I wish Signal didn't use phone numbers as identifiers. That's the original sin of all these apps and the convenient excuse for uploading contacts
You don't need to use phone numbers as identifiers to upload contacts. For example Hangouts (RIP) and Matrix both support letting people find you by number without using it as a primary identifier.
I assume that using numbers as identifiers has two main benefits 1. easy (insecure) auth 2. it forces everyone to provide you their number so that lookup by number works better.
Of course I don't find these worth it. I have had 5 numbers so far and there is a decent chance I will switch numbers again. I don't like having an identifier that is tied to my physical location.
Re: Clubhouse uploads all your contacts
#30It would actually be a neat UI to show the person's contacts letting the person pick which one to try with a "match the hash" function that shows the one way hash generated and does a "ping" on the service to see if someone matches. Won't happen, but would be a fun UI to do.
It is worth nothing that hashing phone numbers without salt is basically useless, and you can't do a lookup like this if salted. North America only has 10M possible phone numbers so brute forcing or building a rainbow table is trivial. I don't know about other country codes but I presume the situation is pretty similar.