Untitled attachment

Notices where this attachment appears

1. Embed this notice
   DavidB (davidbhimself@firefish.city)'s status on Thursday, 10-Jul-2025 20:17:37 JST DavidB

   in reply to

   @pfefferle@mastodon.social Hi Matthias.
   I found the source of the issue.
   There's a checkable option that blocks profiles:
   "Prevent discovery of usernames through '/?author=N' scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps"
   
   Wordfence advises against unchecking it:
   https://www.wordfence.com/help/firewall/brute-force/?utm_source=plugin&utm_medium=pluginUI&utm_campaign=docsIcon#prevent-username-discovery
   
   What do you think?