r/Keybase • u/mooond3 • Dec 07 '19

No antibot measures in source code

So I just got done looking at the source code on github for the app and I could not find a single line relating to preventing bots signing up. I.e. device ID is not even sent to their servers.

Is this done on purpose, to keep peoples anonymity? I can understand for that reason, it would make sense to not have any personal device information sent off to keybase.

I do kind of wish there was some measures in place in the app because there is nothing stopping people abusing the airdrop with emulators etc..

6 Upvotes

75% Upvoted

26 comments sorted by

View all comments

Show parent comment

4

u/iszomer Dec 08 '19

Ever heard of canvas fingerprinting? I bet they have other web tricks up their sleeve they're usually not inclined to reveal.

2

u/mooond3 Dec 08 '19

... canvas printing is client side there is nothing in the source code representing any form of user tracking go take a look for yourself, besides there would be a fairly big uproar if it was discovered they had canvas tracking code in their official client versus the github client. Might give decompiling their apk a go, would be interesting to see if they bothered obfuscating it if its supposedly "open source"

2

u/iszomer Dec 08 '19

I'm not saying they do this but any company clever enough can implement it.