Conversation

Notices

1. Embed this notice
   blaue_Fledermaus (blaue_fledermaus@mstdn.io)'s status on Saturday, 05-Aug-2023 07:45:04 JST blaue_Fledermaus

   • Fedilab Apps

   @apps
   As long as it is a reasonably standardized flavor, and some way in which the "modified" posts are identified.

   • Embed this notice
     Fedilab Apps (apps@toot.fedilab.app)'s status on Saturday, 05-Aug-2023 07:45:03 JST Fedilab Apps

     in reply to

     @blaue_Fledermaus
     We might first turn that option off by default until all edge effects are not identified.

   • Embed this notice
     Fedilab Apps (apps@toot.fedilab.app)'s status on Wednesday, 09-Aug-2023 17:23:32 JST Fedilab Apps

     in reply to

     • :fednet: WetzWetz' OnlyFriends v3.0 🥵 🔞

     @markuswet
     Thanks for warning us. We will see how to avoid that problem.

   • Embed this notice
     :fednet: WetzWetz' OnlyFriends v3.0 🥵 🔞 (markuswet@federation.network)'s status on Wednesday, 09-Aug-2023 17:23:54 JST :fednet: WetzWetz' OnlyFriends v3.0 🥵 🔞

     in reply to

     • Fedilab Apps

     @apps@toot.fedilab.app OK, after a bit of further testing: This is a side effect of hashtags with Umlauts. They seem to create a hyperlink to the sender's instance.
     
     Firefish somewhat exposes that "hijacking" attempts by displaying a small icon next to the link, as well as showing the link preview below the post.
     
     Maybe something to just keep in mind, when you go forward with the Markdown support. 🙇

   • Embed this notice
     :fednet: WetzWetz' OnlyFriends v3.0 🥵 🔞 (markuswet@federation.network)'s status on Wednesday, 09-Aug-2023 17:24:00 JST :fednet: WetzWetz' OnlyFriends v3.0 🥵 🔞

     in reply to

     • Fedilab Apps

     @apps@toot.fedilab.app Since I've seen it in the wild a few toots ago, one of these edge effects would be stuff like "hijacking" hashtag links: A German news site's Mastodon account is doing that by creating Markdown links disguised as hashtags, i.e.
     [ # hashtag ] ( link.to/their-tag-page )
     Obviously, a) this could be abused by a malicious actor; b) has been a problem since the dawn of <a href="">. 🤷
     
     (sorry for the excessive blurring. Don't wanna "dox" them, as it's technically not something malicious 🙃)