Conversation

Notices

1. Embed this notice
   feld (feld@bikeshed.party)'s status on Sunday, 04-Feb-2024 12:41:20 JST feld

   in reply to

   • Trolli Schmittlauch 🦥
   • Matthew Garrett
   @schmittlauch @mjg59 It was in the webfinger / signature validation and this code would presumably never be called on a server that doesn't federate
   • Embed this notice
     Trolli Schmittlauch 🦥 (schmittlauch@toot.matereal.eu)'s status on Sunday, 04-Feb-2024 12:41:30 JST Trolli Schmittlauch 🦥

     in reply to

     • Matthew Garrett

     @mjg59 I like your thinking. But what does "remote accounts" mean in that scope? Due to having disabled federation, there are no instance-remote account there.

   • Embed this notice
     Matthew Garrett (mjg59@nondeterministic.computer)'s status on Sunday, 04-Feb-2024 12:41:31 JST Matthew Garrett

     Random question is CVE-2024-23832 mitigated if you use Soapbox as a Mastodon frontend and if not has anyone checked whether Truth Social (who last updated their Mastodon source download in June 2022) is vulnerable because well