@sashafox @dalias @sam @atomicpoet @fediversenews It’s terrible. If it’s a real word it might be there by accident. If it’s a word shared between different search engines with different policies and you have that magic word, what’s to prevent someone *else* entering your username as permission for a search engine you don’t want to index your posts?
Conversation
Notices
-
Embed this notice
Kevin Davidson (metalsamurai@mas.to)'s status on Sunday, 26-Feb-2023 13:30:29 JST Kevin Davidson - Fediverse News repeated this.
-
Embed this notice
AlisonW ♿🏳️🌈 (alisonw@fedimon.uk)'s status on Sunday, 26-Feb-2023 13:32:30 JST AlisonW ♿🏳️🌈 @MetalSamurai @sashafox @dalias @sam @atomicpoet @fediversenews
Any keyword/s should be marked as such to ensure innocent use isn't caught.
eg #searchable or %searchable, etcFediverse News repeated this. -
Embed this notice
Kevin Davidson (metalsamurai@mas.to)'s status on Sunday, 26-Feb-2023 13:32:58 JST Kevin Davidson @AlisonW @sashafox @dalias @sam @atomicpoet @fediversenews This stuff shouldn’t be in the bio AT ALL. It’s repurposing a free text field that’s intended for humans, not bots. If it really has to be on your profile, then one of the Metadata tags could be used to list the search/index engines you’ve opted in to. I still don’t like it.
Fediverse News repeated this. -
Embed this notice
Kevin Davidson (metalsamurai@mas.to)'s status on Sunday, 26-Feb-2023 13:33:00 JST Kevin Davidson @AlisonW @sashafox @dalias @sam @atomicpoet @fediversenews A bot account you follow to opt in seems much better. You can block it. Your admin can fediblock it, and run a “safe space” (or maybe a ghost town if search is super popular and everyone wants to opt in).
-
Embed this notice
stark@techhub:~$ █ (stark9837@techhub.social)'s status on Sunday, 26-Feb-2023 13:33:10 JST stark@techhub:~$ █ @MetalSamurai @AlisonW @sashafox @dalias @sam @atomicpoet @fediversenews
-
Embed this notice
AlisonW ♿🏳️🌈 (alisonw@fedimon.uk)'s status on Sunday, 26-Feb-2023 13:33:18 JST AlisonW ♿🏳️🌈 @MetalSamurai @sashafox @dalias @sam @atomicpoet @fediversenews
I don't disagree! If one is going the tag route though then it's sensible to use a fixed location - the bio - than search through all posts (which are more likely to contain the keyword). -
Embed this notice
MikeK (mkarliner@mastodon.modern-industry.com)'s status on Sunday, 26-Feb-2023 13:38:56 JST MikeK @MetalSamurai @sashafox @dalias @sam @atomicpoet @fediversenews
There are a couple of mitigations for this...
A magic word of 45:£5-+ffguj (non dictionary)
A OTP magic word with an expiry. (Has some DDOS attack surfaces)
Etc. Etc.
I'm sure we should be talking to @jpmens for creative ways to use DNS for validation...