Skip to content

Comment on Find Friends Abuse

Comments

Why is user info presented in the clear to anyone who asks for it via their api?

Here's a more sane approach I imagine:

Allow sending snaps to a phone number (rather than to a username - since you would not know it the time), and attach a "friend request" as part of delivery. When the person at that phone number retrieves the snap they have the additional option of accepting the friend request which then (and only then) exposes their user info to the originating party.

That would be horribly abused (people sending things other people don't much want to look at).

Allowing the friend based on phone numbers might be ok (but you still have to somehow make sure people don't get a bunch of garbage requests).

Leave out the snap sending part, just make it a friend request. Don't expose to the sender whether the number is not attached to account, it is accepted or rejected. User can or can not send snaps then.

via MMS? that would be quite a bit of business AND development effort... (which must be redone for each country of operation)

No, via snapchat's delivery system; they obviously can map a phone number to username, therefor they can implement sending snaps to phone numbers (as a proxy) in place of a username.

Snapchat doesn't use MMS.

That was sort of my point

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.