Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers · HackerPapers discussions

Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers — HN submission

Fri, 02 Jan 2026 16:24:42 GMT

Exploiting Silent Delivery Receipts to Monitor Mobile Instant Messengers

3 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers — mentioned by pil0u

Tue, 30 Dec 2025 08:08:05 GMT

Paper: https://arxiv.org/pdf/2411.11194 GitHub repo: https://github.com/gommzystudio/device-activity-tracker

Paper and discussion history. A mention is not an endorsement.

Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers — HN submission

Tue, 09 Dec 2025 15:18:42 GMT

Tracking Phone Numbers via WhatsApp and Signal: Open-Source PoC

3 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers — HN submission

Sat, 29 Nov 2025 04:38:41 GMT

Exploiting silent delivery receipts to monitor users on instant messengers

20 points; 4 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers — mentioned by wakawaka28

Sat, 29 Nov 2025 00:41:54 GMT

Phone numbers aren't required now. But there are flaws in Signal. Your phone usage can be tracked in high resolution through constant pinging of malformed status messages. I can't find the paper right now but researchers found that they could track their own data about when the phone was on, unlocked, and had Signal on the screen. That can be correlated between users, to see who is talking to who. It can be used to try to ambush you while the phone is unlocked. You don't even have to have a connection to the spies, if I remember right. Signal devs have done nothing about this issue since…

Paper and discussion history. A mention is not an endorsement.

Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers — mentioned by wakawaka28

Sat, 29 Nov 2025 00:36:49 GMT

Are Signal developers trustworthy enough? What about this push for "cloud backups"? There are other flaws in Signal too like being able to monitor people's phone usage and stuff through the notification system. I can't find it now but Signal and WeChat have the same issues, and both received a disclosure. Only WeChat did anything about it. Sad... Edit: Found it! "Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers" https://arxiv.org/abs/2411.11194

Paper and discussion history. A mention is not an endorsement.

Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers — HN submission

Mon, 24 Nov 2025 14:08:01 GMT

Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users

5 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.