@TheMadPirate @anonymous @ins0mniak @p Now here's the thing. This isn't an exploit for soapbox now.

But Poa.st in particular is so fucking high profile that it not only gets targeted by random autists with a grudge to be exploited, but also random antifa wannabe activists, etc.

Plus as sites like Kiwi Farms and Poast have been targeted by malicious attachments, having a wider attack surface is a bad idea, especially if you cannot turn off the emulator. It's very common for someone to exploit a bit of code you forgot about as well, and with the feature creep of fedi instance software stacks this could become a problem.