“Signal instantly dismissed my report, saying it wasn’t their responsibility and it was up to users to hide their identity”
A 15-year-old used Cloudflare cache headers to place Signal and Discord users within about 250 miles with zero clicks. Signal said hiding your location is your problem. Discord blamed Cloudflare. Cloudflare had the same bug reported a year earlier and paid $200 per researcher once it went public.