Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mitra.pawslut.party/objects/01963b35-8133-3920-fe66-6477b3cbd274">Pawslut420 (sendpaws@mitra.pawslut.party)'s status on Wednesday, 16-Apr-2025 06:03:43 JST</a><a href="https://mitra.pawslut.party/users/sendpaws" title="sendpaws@mitra.pawslut.party"><img src="https://gnusocial.jp/avatar/325012-48-20250202232456.webp" width="48" height="48" alt="Pawslut420" style="position: absolute; left: 0; top: 0;">Pawslut420</a><div><a href="https://mitra.social/objects/01963a84-ed92-5682-7acf-fd61a189ec12" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/85321" title="silverpill@mitra.social">silverpill</a></li><li><a href="https://gnusocial.jp/user/319309" title="blacklight447@mastodon.social">Blacklight447</a></li></ul></div></section><article><p><a href="https://mitra.social/users/silverpill">@silverpill</a> <a href="https://mastodon.social/@blacklight447">@blacklight447</a> <a href="https://mastodon.neat.computer/@jonah">@jonah</a></p><p>&gt;The only real privacy feature in Mastodon is followers-only posts, and even that is not implemented properly.</p><p>The problem with how it's implemented, is either two things can happen: a server can "strip" the attribute from a post, or there can be some security flaw allowing people to see your posts as with Pixelfed recently. A lot of privacy features on the fedi are like this, they rely on "good faith" implementations.<br><a href="https://fokus.cool/2025/03/25/pixelfed-vulnerability.html">https://fokus.cool/2025/03/25/pixelfed-vulnerability.html</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4899171#notice-9599332">In conversation</a><time datetime="2025-04-16T06:03:43+09:00" title="Wednesday, 16-Apr-2025 06:03:43 JST">about a month ago</time> <span>from <span><a href="https://mitra.pawslut.party/objects/01963b35-8133-3920-fe66-6477b3cbd274" rel="external" title="Sent from mitra.pawslut.party via ActivityPub">mitra.pawslut.party</a></span></span><a href="https://mitra.pawslut.party/objects/01963b35-8133-3920-fe66-6477b3cbd274">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: fokus.cool</div><h5><a href="https://fokus.cool/2025/03/25/pixelfed-vulnerability.html">Pixelfed leaks private posts from other Fediverse instances - fiona fokus</a></h5><div></div></header><div></div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Pawslut420 (sendpaws@mitra.pawslut.party)'s status on Wednesday, 16-Apr-2025 06:03:43 JSTPawslut420
in reply to
@silverpill @blacklight447 @jonah
>The only real privacy feature in Mastodon is followers-only posts, and even that is not implemented properly.
The problem with how it's implemented, is either two things can happen: a server can "strip" the attribute from a post, or there can be some security flaw allowing people to see your posts as with Pixelfed recently. A lot of privacy features on the fedi are like this, they rely on "good faith" implementations.
https://fokus.cool/2025/03/25/pixelfed-vulnerability.html
In conversationabout a month ago from mitra.pawslut.partypermalink
Attachments
1. Domain not in remote thumbnail source whitelist: fokus.cool
  Pixelfed leaks private posts from other Fediverse instances - fiona fokus

Public

Embed Notice

HTML Code

Corresponding Notice