Ethereum developer ConsenSys said Infura stores IP addresses from MetaMask users
ConsenSys, a blockchain product company building Ethereum-centered solutions, told users that the company collects IP addresses from MetaMask users. A privacy update released on November 23 explained how Infura, a service built by ConsenSys, collects and stores IP addresses.
Infura operates decentralized nodes needed to run crypto wallets. MetaMask is a popular Ethereum wallet launched in 2016. Notably, both products are owned by ConsenSys and work in sync.
MetaMask is designed to pick Infura as its default transactions broadcaster. The wallet connects to Infura through remote call procedure technology (RPC). This means that when users send ERC 20 tokens via MetaMask, Infura links the transaction to Ethereum’s blockchain.
Infura in turn retrieves and stores the IP address tied to the MetaMask users as part of its off-chain data collection policy.
ConsenSys and Uniswap updates raise privacy concerns
The firm said it does not collect the same data from users who leverage other RPC service providers. However, third-party RPC firms could have access to the same data as well.
Although MetaMask Founder Dan Finlay tweeted that the wallet does not leverage the collected IP data, users pointed out the privacy risks linked with such policies. Theoretically, IP data combined with on-chain data might be used to track and dox individuals.
I think we can get this fixed soon. We are not using IP addresses even if they are being temporarily stored, which they don't need to be, as we're not using them for anything.
Similar concerns were raised earlier in November when Uniswap updated its privacy policy to include off-chain data like device type and browser version to name a few.
Source: Read Full Article