Security News > 2024 > March > IP address X-posure now a feature on Musk's social media thing

Video and audio calling features for X Premium users added last year to Elon Musk's version of Twitter have been expanded to everyone on the platform, and we're warning Reg readers yet again to disable the feature - this time because it appears to expose user IP addresses.

X even admits that its audio and video calling exposes user IPs on the help page for the feature.

Referring to an enhanced call privacy feature, X said "Once our servers facilitate the initial setup, the call itself is routed peer-to-peer such that each parties [sic] IP address may be visible to the other."

Enabling the feature might not do much in the way of a privacy guarantee either - if either party to an X audio or video call has enhanced privacy enabled, calls "Will be relayed through X infrastructure, and the IP address of any party that has this setting enabled will be masked."

If they're not, users are basically trading IP exposure between callers for exposure to X, and the potential that Musk and company could listen in on calls routed through its infrastructure.

To find the audio and video calling features, which can only be disabled or modified in the Twitter app, not on the website, start by tapping on your profile picture.

News URL

https://go.theregister.com/feed/www.theregister.com/2024/03/05/ip_address_xposure_now_a/