element-hq / element-hq/element-x-android
Privacy | EXA appears to "leak" the user device make and model in the `device_display_name` ?
Open
- Dominant language
- Kotlin
- Stars
- 2.4k
- Forks
- 624
- Avg merge
- 1d 14h
- Merged PRs (30d)
- 149
Description
EXA will setup the initial_device_display_name like:
- Element X nightly on Google Pixel 5
- Element X on samsung SM-AXXX
This appears to be visible by other users as part of the `keys/query` `unsigned` payload.
As a work around it is possible to edit the display name using web.
For comparison, EXI will name the device `Element X iOS`, legacy android is doing `Element Android`
Contributor guide
Assessment
This issue has not been assessed yet.