[bisq-network/bisq] Solicitation for Feedback After Trade Could Lead to Information Leak to Google (#5578)
notifications at github.com
Sun Jun 20 05:36:18 CEST 2021
SUPPORT REQUESTS: This is for reporting bugs in the Bisq app.
If you have a support request, please join #support on Bisq's
Keybase team over at https://keybase.io/team/Bisq
When a trade completes, there is a popup soliciting feedback from the trade participant. Choosing to give that feedback opens a new browser window with a link to a Google Form.
The link that opened when I chose this option today had the form:
h t t p s : // docs.google.com / forms/ d / e/ 1FAIpQLSczA...51664090416 (link URL purposefully obscured/incomplete)
It seems to me as a user of Bisq that it would not be aligned with the mission of Bisq to use tools from Google, a service that I believe does not commit to a reasonable amount of privacy when their (fake) "Free" tools are used.
In addition to the above, if a user allows themselves to be contacted, and they input an email address into the form, then this information would also be revealed to Google.
### Steps to reproduce
Unfortunately, I am not able to run another transaction at this time to verify exactly this experience. Perhaps there is a testnet mode for Bisq, in which case it might be possible to reproduce without making an actual transaction.
### Expected behaviour
Feedback is provided to Bisq team via secure private communication.
### Actual behaviour
Feedback is provided via a 3rd party service that does not guarantee privacy.
Not available at this time (sorry, I wasn't about this at the time of my transaction).
#### Device or machine
Mac mini (Mid 2011); macOS High Sierra Version 10.13.6; Firefox 89.0 (64-bit)
#### Additional info
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the bisq-github