Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.social/users/HistoPol/statuses/111260461950320143">HistoPol (#HP) 🥥 🌴 (histopol@mastodon.social)'s status on Thursday, 19-Oct-2023 16:18:42 JST</a><a href="https://mastodon.social/@HistoPol" title="histopol@mastodon.social"><img src="https://gnusocial.jp/avatar/44595-48-20221221005726.webp" width="48" height="48" alt="HistoPol (#HP) 🥥 🌴" style="position: absolute; left: 0; top: 0;">HistoPol (#HP) 🥥 🌴</a><div><a href="https://mastodon.gamedev.place/@badlogic/111246798083590676" rel="in-reply-to">in reply to</a><ul><li></ul></div></section><article><p>Nicht nur massive <a href="https://mastodon.social/tags/Sicherheitsl%C3%BCcke" rel="tag">#Sicherheitslücke</a> bei <a href="https://mastodon.social/tags/Bluesky" rel="tag">#Bluesky</a> (alias <a href="https://mastodon.social/tags/Twitter20" rel="tag">#Twitter20</a>):</p><p>ALLE Posts sind grundsätzlich ÖFFENTLICH, wenn man über die offizielle Schnittstelle darauf zugreift!</p><p>Via <a href="https://mastodon.gamedev.place/@badlogic">@badlogic</a> </p><p><a href="https://mastodon.gamedev.place/@badlogic/111246798083590676" rel="nofollow noreferrer">https://mastodon.gamedev.place/@badlogic/111246798083590676</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2195555#notice-4334962">In conversation</a><time datetime="2023-10-19T16:18:42+09:00" title="Thursday, 19-Oct-2023 16:18:42 JST">about a year ago</time> <span>from <span><a href="https://mastodon.social/@HistoPol/111260461950320143" rel="external" title="Sent from mastodon.social via ActivityPub">mastodon.social</a></span></span><a href="https://mastodon.social/@HistoPol/111260461950320143">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: cdn.masto.host</div><h5><a href="https://mastodon.gamedev.place/@badlogic/111246798083590676">Mario Zechner (@badlogic@mastodon.gamedev.place)</a></h5><div> from <span>Mario Zechner</span></div></header><div>Attached: 1 imageThe past two nights I wrote a "thread reader app" for BlueSky.https://skyview.socialOh boy. The protocol is absolutely insane. RPC galore, responses are only partially typed. The docs are pretty much useless.But the "funniest" part is this: there's no privacy. And I don't mean missing DMs.All your posts are available through API endpoints. Without any authentication. By design.The "invite-only" thing may have you think otherwise.Here are my last 100 posts.https://bsky.social/xrpc/com.atproto.repo.listRecords?repo=badlogic.bsky.social&amp;collection=app.bsky.feed.post</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
HistoPol (#HP) 🥥 🌴 (histopol@mastodon.social)'s status on Thursday, 19-Oct-2023 16:18:42 JSTHistoPol (#HP) 🥥 🌴
in reply to
- Mario Zechner
Nicht nur massive #Sicherheitslücke bei #Bluesky (alias #Twitter20):
ALLE Posts sind grundsätzlich ÖFFENTLICH, wenn man über die offizielle Schnittstelle darauf zugreift!
Via @badlogic
https://mastodon.gamedev.place/@badlogic/111246798083590676
In conversationabout a year ago from mastodon.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: cdn.masto.host
  Mario Zechner (@badlogic@mastodon.gamedev.place)
  from Mario Zechner
  Attached: 1 image The past two nights I wrote a "thread reader app" for BlueSky. https://skyview.social Oh boy. The protocol is absolutely insane. RPC galore, responses are only partially typed. The docs are pretty much useless. But the "funniest" part is this: there's no privacy. And I don't mean missing DMs. All your posts are available through API endpoints. Without any authentication. By design. The "invite-only" thing may have you think otherwise. Here are my last 100 posts. https://bsky.social/xrpc/com.atproto.repo.listRecords?repo=badlogic.bsky.social&collection=app.bsky.feed.post

Public

Embed Notice

HTML Code

Corresponding Notice