Skip to content

Settings menu reveals phone number when it's possibly not supposed to? #14986

Description

@CreamyArch

Guidelines

  • I have searched open and closed issues for duplicates
  • I am submitting a bug report for existing functionality that does not work as intended
  • This isn't a feature request or a discussion topic

Bug description

Tapping on your profile picture opens the settings menu and your phone number will be on your screen even if you have "Who can see my number" and "Who can find me by number" disabled.

I don't know if this is technically a bug or not but it feels like a bug because:

  1. This is an extreme security hazard, signal users are one accidental tap away from revealing their phone number to anyone who has visual contact to their device.
  2. Based on the context of this user interface, it seems like it's intended to be used to reveal the necessary information for people to add you, which cannot be done by phone number if "Who can see my number" and "Who can find me by number" is disabled.
  3. There are more logical sub menus for revealing a users phone number when they wish to know what it is while "Who can see my number" and "Who can find me by number" is disabled.
  4. A user can already tell what account they are signed into by looking at their name, profile picture, and username.

Screenshots

No response

Device

No response

Android version

No response

Signal version

No response

Link to debug log

No response

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions