Twitter’s “Tip Jar” idea is great: With this system it is possible to send money to another user to support him if you like what he publishes on Twitter. The feature has already been rolled out, but there have been some privacy issues related to it.
A cybersecurity researcher named Rachel Tobac reported that when you tip through PayPal, that might reveal your physical addressThis is unnecessary and can raise significant privacy concerns.
It can prevent your physical address from being shared
The physical address of the sender is not always disclosed. With the “Tip Glass” function, you can choose between several payment providers to tip the Twitter user. If you use PayPal, the recipient will be able to see your physical address (mailing address) when they receive this money..
Huge head on PayPal Twitter Tip Jar. If you tip someone through PayPal and the recipient opens the tip receipt you sent, they will receive your * address *. Tested only to confirm by leaving a tip @ Yashar On Twitter with PayPal and he actually got my address, I gave him a tip. https://t.co/R4NvaXRdlZ pic.twitter.com/r8UyJpNCxu
– Rachel Tobac (@RachelTobac) May 6, 2021
One of the top product managers on Twitter, Kavyon Beykpour, stated that this problem is due to Payal’s own business. “” We cannot control the disclosure of the physical address“, To explain“However, we are adding a disclaimer for people who tip through PayPal so that they are aware of it.” “”
Can you avoid showing the physical address? PayPal employees explain that and that This disclosure will only be made if you send the tip as “goods and services”.. If you choose another category like “Friends and Family”, your physical address will not be given or given to anyone who will receive this money.
In addition to this problem, another expert named Ashkan Soltani discovered this Twitter feature Also shows the recipient’s email address Tip (the one linked to their Twitter account) even if you don’t send them money.
Attention everyone: @ TwitterThe recipient’s new “Tip Jar” feature shows the recipient’s email address linked to their account, even if you’re not sending them real money.
(I got permission from @ jason_kint to show his email in this video)
Thread here: https://t.co/Z6WFuXSlgO https://t.co/e8f9J58db7 pic.twitter.com/6u4Vjwkinf
– ashkan soltani (@ ashk4n) May 7, 2021
How later clarified Soltani, The problem affects users who do not have an alias configured in the PayPal.me service: In these cases PayPal will provide your email addresses.
Tip Jar is currently in beta and not available to all users. However, information such as the physical address or email address is leaked This is something that raises privacy concerns on both sides.
Even if in your FAQ Twitter warns that information could actually be shared “with the recipient or with others,” such as: B. Full name or address. It is unlikely that many users will view this document before using the function. Whether PayPal and Twitter can solve the problem remains to be seen.
45seconds is a new medium. Do not hesitate to publish our article on social networks to give us a solid boost. 🙂