Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://bikeshed.party/objects/d72938b4-4659-4753-a264-eaec6c1f311e">feld (feld@bikeshed.party)'s status on Friday, 12-Jan-2024 02:25:31 JST</a><a href="https://bikeshed.party/users/feld" title="feld@bikeshed.party"><img src="https://gnusocial.jp/avatar/4193-48-20240209135539.webp" width="48" height="48" alt="feld" style="position: absolute; left: 0; top: 0;">feld</a><div><a href="https://infosec.exchange/@tw000/111738454239216466" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/23829" title="malwaretech@infosec.exchange">Marcus Hutchins :verified:</a></li><li><a href="https://gnusocial.jp/user/97307" title="tw000@infosec.exchange">tw000</a></li><li><a href="https://gnusocial.jp/user/162380" title="steveo1049@mastodon.sdf.org">SteveO ✅ - For Harris 🇺🇸</a></li><li><a href="https://gnusocial.jp/user/216609" title="gearhead@fosstodon.org">David Gerhart</a></li><li><a href="https://gnusocial.jp/user/219374" title="teri_kanefield@mastodon.social">Teri Kanefield</a></li></ul></div></section><article><a href="https://infosec.exchange/@tw000">@tw000</a> <a href="https://fosstodon.org/@gearhead">@gearhead</a> <a href="https://infosec.exchange/@jerry">@jerry</a> <a href="https://mastodon.sdf.org/@steveo1049">@steveo1049</a> <a href="https://mastodon.social/@Teri_Kanefield">@Teri_Kanefield</a> <a href="https://infosec.exchange/@malwaretech">@malwaretech</a> it's just additional metadata on an activity. The client signature verification would fail if it was tampered with.<br><br>The only abuse case that really exists is if the client hand-crafts a false link preview but this is no more dangerous a situation that the classic "embed a fake thumbnail into the JPEG" prank we saw 10 years ago</article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2572384#notice-5095500">In conversation</a><time datetime="2024-01-12T02:25:31+09:00" title="Friday, 12-Jan-2024 02:25:31 JST">Friday, 12-Jan-2024 02:25:31 JST</time> <span>from <span><a href="https://bikeshed.party/objects/d72938b4-4659-4753-a264-eaec6c1f311e" rel="external" title="Sent from bikeshed.party via ActivityPub">bikeshed.party</a></span></span><a href="https://bikeshed.party/objects/d72938b4-4659-4753-a264-eaec6c1f311e">permalink</a></footer></blockquote>

Corresponding Notice

Embed this notice
feld (feld@bikeshed.party)'s status on Friday, 12-Jan-2024 02:25:31 JSTfeld
in reply to
@tw000 @gearhead @jerry @steveo1049 @Teri_Kanefield @malwaretech it's just additional metadata on an activity. The client signature verification would fail if it was tampered with.

The only abuse case that really exists is if the client hand-crafts a false link preview but this is no more dangerous a situation that the classic "embed a fake thumbnail into the JPEG" prank we saw 10 years ago
In conversationFriday, 12-Jan-2024 02:25:31 JST from bikeshed.partypermalink

Public

Embed Notice

HTML Code

Corresponding Notice