FediTips has moved!
As a technical test, I'm going to be changing the server settings for the accounts @FediFollows, @FediVideo, @FediGarden and @homegrown. It should take effect in the next few days.
Don't worry, you don't have to do anything and you probably won't notice anything. However, if you encounter any problems such as broken follows etc please get in touch with me via this account or my personal account at @FediThing.
(For technical people, I'm going to try activating the "authorized fetch" feature.)
FediTips has moved!
p.s. The switch hasn't actually been thrown yet, if anyone has good reasons not to please let me know ASAP. I've tried to read as much info as possible, and asked for advice in an earlier more low-key post. Asking again now in case something else was missed in previous thread.
bugbear
@feditips will you post about it if there are any challenges?* I've considered doing the same, but a bit worried it breaks things. Although, eventually I should do the switch, too.
* if I am not mistaken, it could also potentially break replies for some instances
FediTips has moved!
I'm not sure if that's the case though? There are people on the Mastodon github complaining that people who aren't logged on have too much access to public threads even with secure mode switched on:
https://github.com/mastodon/mastodon/issues/20930
This is partly why I'm doing the test, there's some contradiction in how this is documented/perceived.
Hazelnoot
@feditips I'm only aware of one reason not to, which is that it prevents people from browsing your profile for a vibe check or similar. But it's entirely your choice whether to care about that or not.
FediTips has moved!
Great that you found them :)
I try to mention them now and then, and in my profile, but I don't want to annoy people by mentioning them too often 😁
Glitzersachen.de
@feditips @FediFollows @FediVideo @FediGarden @homegrown @FediThing
You should post these handles more often ... Just discovered them only now.
FediTips has moved!
As far as I can tell, it does that if you're logged in but not if you're logged out?
There's no way to stop scraping of public posts, but at least it would force people to scrape instead of viewing easily?
Hazelnoot
@feditips if that thread is correct, then Mastodon's implementation of Authorized Fetch is broken. When it's working, attempting to access anything through a web browser should return a 403 / similar error unless you log in. That's also how it works on Pleroma and Misskey.
FediTips has moved!
Ahh... that perhaps explains the apparent contradictions. Thanks!
Hazelnoot
@feditips It seems like Mastodon may have split AUTHORIZED_FETCH into two separate toggles. To prevent scraping / public web access you have to also enable DISALLOW_UNAUTHENTICATED_API_ACCESS. With that disabled, the web interface will still work (but you lose most of the privacy benefits of AUTHORIZED_FETCH.
FediTips has moved!
Thanks for headsup.
Was this a while ago? I wonder if that has been fixed since then? 🤔
Mr Bitterness :mastodon:
Only issue I had with Authorized Fetch enabled on my instance is I couldnt follow Peertube / Pixelfed accounts. It would appear to work, but Id check later & not following.
Turned off authorized fetch & problem went away for me & users on my instance.
FediTips has moved!
Hmm... I'll have to keep an eye on that then. Thank you for the warning.
Mr Bitterness :mastodon:
@feditips
No, this was just a couple of weeks ago, with the current release.
FediTips has moved!
Just looking at PeerTube's github, they mention this is an issue for Mastodon servers in limited federation mode:
https://github.com/Chocobozzz/PeerTube/issues/4226
This isn't what you meant?
FediTips has moved!
p.p.s. Okay, it's switched on now. As I said before, if you have any problems with my other accounts let me know :)
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.