Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.social/users/cheeaun/statuses/115262965818882109">Chee Aun 🤔 (cheeaun@mastodon.social)'s status on Saturday, 27-Sep-2025 10:30:12 JST</a><a href="https://mastodon.social/@cheeaun" title="cheeaun@mastodon.social"><img src="https://gnusocial.jp/avatar/101551-48-20230315133326.webp" width="48" height="48" alt="Chee Aun 🤔" style="position: absolute; left: 0; top: 0;">Chee Aun 🤔</a><div><ul><li></ul></div></section><article><p>Had a quick thought about this: <a href="https://cosocial.ca/@timbray/115260431864647847" rel="nofollow">https://cosocial.ca/@timbray/115260431864647847</a> <a href="https://cosocial.ca/@timbray">@timbray</a> </p><p>Found some resources:<br>- "FEP-8967: Generating link previews for attached links" <a href="https://codeberg.org/fediverse/fep/src/branch/main/fep/8967/fep-8967.md" rel="nofollow">https://codeberg.org/fediverse/fep/src/branch/main/fep/8967/fep-8967.md</a><br>- Discussion: <a href="https://socialhub.activitypub.rocks/t/fep-8967-generating-link-previews-for-attached-links/5598" rel="nofollow">https://socialhub.activitypub.rocks/t/fep-8967-generating-link-previews-for-attached-links/5598</a></p><p>Randomly found this pretty interesting read: "Link Previews: How a Simple Feature Can Have Privacy and Security Risks" <a href="https://mysk.blog/2020/10/25/link-previews/" rel="nofollow">https://mysk.blog/2020/10/25/link-previews/</a> (2020)</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/5689568#notice-11167148">In conversation</a><time datetime="2025-09-27T10:30:12+09:00" title="Saturday, 27-Sep-2025 10:30:12 JST">about 9 months ago</time> <span>from <span><a href="https://mastodon.social/@cheeaun/115262965818882109" rel="external" title="Sent from mastodon.social via ActivityPub">mastodon.social</a></span></span><a href="https://mastodon.social/@cheeaun/115262965818882109">permalink</a><h4>Attachments</h4><ol><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://cosocial.ca/@timbray/115260431864647847">Tim Bray (@timbray@cosocial.ca)</a></h5><div> from <span>Tim Bray</span></div></header><div>@cheeaun@mastodon.social You know what would be cool? When I paste a link into a post, to find out whether it has a nice og: preview because, if not, I'll paste the headline in too.  Just posted a link, included the headline, and now it appears twice in the post, looking kind of dumb.</div><footer></footer></article></li><li><article><header><div>Domain not in remote thumbnail source whitelist: codeberg.org</div><h5><a href="https://codeberg.org/fediverse/fep/src/branch/main/fep/8967/fep-8967.md">fep/fep/8967/fep-8967.md at main</a></h5><div> from <span>fediverse</span></div></header><div>fep - Fediverse Enhancement Proposals</div><footer></footer></article></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/5263909">Untitled attachment</a></label><br></li><li><article><header><div>Domain not in remote thumbnail source whitelist: mysk.blog</div><h5><a href="https://mysk.blog/2020/10/25/link-previews/">Link Previews: How a Simple Feature Can Have Privacy and Security Risks</a></h5><div></div></header><div>Link previews in chat apps can cause serious privacy problems if not done properly. We found several cases of apps with vulnerabilities such as: leaking IP addresses, exposing links sent in end-to-end encrypted chats, and unnecessarily downloading gigabytes of data quietly in the background.We think link previews are a good case study of how a simple feature can have privacy and security risks. We'll go over some of the bugs we found while investigating how this feature is implemented in the most popular chat apps on iOS and Android.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Chee Aun 🤔 (cheeaun@mastodon.social)'s status on Saturday, 27-Sep-2025 10:30:12 JSTChee Aun 🤔
- Tim Bray
Had a quick thought about this: https://cosocial.ca/@timbray/115260431864647847 @timbray
Found some resources:
- "FEP-8967: Generating link previews for attached links" https://codeberg.org/fediverse/fep/src/branch/main/fep/8967/fep-8967.md
- Discussion: https://socialhub.activitypub.rocks/t/fep-8967-generating-link-previews-for-attached-links/5598
Randomly found this pretty interesting read: "Link Previews: How a Simple Feature Can Have Privacy and Security Risks" https://mysk.blog/2020/10/25/link-previews/ (2020)
In conversationabout 9 months ago from mastodon.socialpermalink
Attachments
1. No result found on File_thumbnail lookup.
  Tim Bray (@timbray@cosocial.ca)
  from Tim Bray
  @cheeaun@mastodon.social You know what would be cool? When I paste a link into a post, to find out whether it has a nice og: preview because, if not, I'll paste the headline in too. Just posted a link, included the headline, and now it appears twice in the post, looking kind of dumb.
2. Domain not in remote thumbnail source whitelist: codeberg.org
  fep/fep/8967/fep-8967.md at main
  from fediverse
  fep - Fediverse Enhancement Proposals
3. Untitled attachment
4. Domain not in remote thumbnail source whitelist: mysk.blog
  Link Previews: How a Simple Feature Can Have Privacy and Security Risks
  Link previews in chat apps can cause serious privacy problems if not done properly. We found several cases of apps with vulnerabilities such as: leaking IP addresses, exposing links sent in end-to-end encrypted chats, and unnecessarily downloading gigabytes of data quietly in the background. We think link previews are a good case study of how a simple feature can have privacy and security risks. We'll go over some of the bugs we found while investigating how this feature is implemented in the most popular chat apps on iOS and Android.

Public

Embed Notice

HTML Code

Corresponding Notice