{"action":"created","issue":{"url":"https://api.github.com/repos/WhisperSystems/TextSecure/issues/3928","labels_url":"https://api.github.com/repos/WhisperSystems/TextSecure/issues/3928/labels{/name}","comments_url":"https://api.github.com/repos/WhisperSystems/TextSecure/issues/3928/comments","events_url":"https://api.github.com/repos/WhisperSystems/TextSecure/issues/3928/events","html_url":"https://github.com/WhisperSystems/TextSecure/issues/3928","id":100454472,"number":3928,"title":"Warn user about contact leakage before creating a large group","user":{"login":"konklone","id":4592,"avatar_url":"https://avatars.githubusercontent.com/u/4592?v=3","gravatar_id":"","url":"https://api.github.com/users/konklone","html_url":"https://github.com/konklone","followers_url":"https://api.github.com/users/konklone/followers","following_url":"https://api.github.com/users/konklone/following{/other_user}","gists_url":"https://api.github.com/users/konklone/gists{/gist_id}","starred_url":"https://api.github.com/users/konklone/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/konklone/subscriptions","organizations_url":"https://api.github.com/users/konklone/orgs","repos_url":"https://api.github.com/users/konklone/repos","events_url":"https://api.github.com/users/konklone/events{/privacy}","received_events_url":"https://api.github.com/users/konklone/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-08-12T03:00:38Z","updated_at":"2015-08-12T04:40:53Z","closed_at":"2015-08-12T04:40:53Z","body":"TextSecure makes it too easy to accidentally leak your contacts' phone numbers to each other. It should make it more clear to the user -- perhaps through **a user warning if a group contains more than X people** -- that a group message to a large group will share everyone's phone numbers with everyone else.\r\n\r\nBackground: I've been an enthusiastic TextSecure user for a couple years now, but I hadn't done much group messaging. I reset my phone and so my TextSecure key had changed. I wanted to let everyone know en masse, and went to create a group of all my TextSecure contacts. Once I created the group (before I explicitly sent a message), it had already created the new group on all of my friends' phones, and I quickly learned that they could all see every other person's phone number.\r\n\r\nObviously, if I'd done much group messaging before on TextSecure, I would have known this. But I hadn't yet, and this was a rough way to learn it that resulted in me weakening the privacy of a good number of my friends.\r\n\r\nI can imagine many solutions to address this, but the one that I think would involve the least engineering effort would be to warn a user that phone numbers will be shared before creating a group where the group is above a certain threshold. This could take the form of an OK/Cancel popup after hitting the button to create a group, or something more integrated.\r\n\r\nWhatever the solution, I believe adding friction to mass-contact-leakage is well within TextSecure's commitment to a UX that makes secure communication easy. With a high enough threshold, it's unlikely to affect many users, and will only add that friction to a small number of important cases where that friction is constructive."},"comment":{"url":"https://api.github.com/repos/WhisperSystems/TextSecure/issues/comments/130158912","html_url":"https://github.com/WhisperSystems/TextSecure/issues/3928#issuecomment-130158912","issue_url":"https://api.github.com/repos/WhisperSystems/TextSecure/issues/3928","id":130158912,"user":{"login":"moxie0","id":512439,"avatar_url":"https://avatars.githubusercontent.com/u/512439?v=3","gravatar_id":"","url":"https://api.github.com/users/moxie0","html_url":"https://github.com/moxie0","followers_url":"https://api.github.com/users/moxie0/followers","following_url":"https://api.github.com/users/moxie0/following{/other_user}","gists_url":"https://api.github.com/users/moxie0/gists{/gist_id}","starred_url":"https://api.github.com/users/moxie0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moxie0/subscriptions","organizations_url":"https://api.github.com/users/moxie0/orgs","repos_url":"https://api.github.com/users/moxie0/repos","events_url":"https://api.github.com/users/moxie0/events{/privacy}","received_events_url":"https://api.github.com/users/moxie0/received_events","type":"User","site_admin":false},"created_at":"2015-08-12T04:40:53Z","updated_at":"2015-08-12T04:40:53Z","body":"Thanks but I don't think we're going to do this."}}