Shakedown Social

Kevin Karhan :verified:<a href="https://beige.party/@theropologist" class="u-url mention" rel="nofollow noopener" target="_blank">@theropologist</a> <a href="https://beige.party/@ItsThatDeafGuy" class="u-url mention" rel="nofollow noopener" target="_blank">@ItsThatDeafGuy</a> <a href="https://beige.party/@rothko" class="u-url mention" rel="nofollow noopener" target="_blank">@rothko</a> do you have any IPs and/or FQDNs or domains <a href="https://infosec.space/tags/Maven" class="mention hashtag" rel="nofollow noopener" target="_blank">#Maven</a> uses for <a href="https://infosec.space/tags/Scraping" class="mention hashtag" rel="nofollow noopener" target="_blank">#Scraping</a> so I can add them to my <a href="https://github.com/greyhat-academy/lists.d/blob/main/activitypub.domains.block.list.tsv" rel="nofollow noopener" target="_blank">public blocklist</a> that already has <a href="https://infosec.space/tags/Bridgy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Bridgy</a>, <a href="https://infosec.space/tags/awakari" class="mention hashtag" rel="nofollow noopener" target="_blank">#awakari</a> and <a href="https://infosec.space/tags/ContentNation" class="mention hashtag" rel="nofollow noopener" target="_blank">#ContentNation</a> on? If so, please feel free to message me and/or <a href="https://github.com/greyhat-academy/lists.d/issues/new/choose" rel="nofollow noopener" target="_blank">open up an issue</a>...

:mima_rule: Mima-sama<blockquote>Even more shocking is the revelation that somehow, even private DMs from Mastodon were mirrored on their public site and searchable. How this is even possible is beyond me, as DM’s are ostensibly only between two parties, and the message itself was sent from two hackers.town</blockquote>WHAT THE FUCK? There should have been no way that <a href="https://makai.chaotic.ninja/tags/Maven" rel="nofollow noopener" target="_blank">#Maven</a> was able to read DMs, even if they're poorly coded (should be importing Public posts only) and the DMs are not E2EE. I guess the common wisdom of not trusting the privacy of <a href="https://makai.chaotic.ninja/tags/Mastodon" rel="nofollow noopener" target="_blank">#Mastodon</a> DMs is very correct all along. :koishtare: Oh, and I was skeptical of whether this is block worthy (don't want another <a href="https://makai.chaotic.ninja/tags/ContentNation" rel="nofollow noopener" target="_blank">#ContentNation</a> or <a href="https://makai.chaotic.ninja/tags/Awakari" rel="nofollow noopener" target="_blank">#Awakari</a> incident again), but this definitely is <a href="https://makai.chaotic.ninja/tags/fediblock" rel="nofollow noopener" target="_blank">#fediblock</a> worthy considering their casual response. Reading someone else's DMs is never acceptable. This flaw should've been acknowledged and reported to Mastodon (and perhaps other <a href="https://makai.chaotic.ninja/tags/fediverse" rel="nofollow noopener" target="_blank">#fediverse</a> developers too just in case). <a href="https://makai.chaotic.ninja/tags/fediversemeta" rel="nofollow noopener" target="_blank">#fediversemeta</a> RE: <a href="https://wedistribute.org/2024/06/maven-mastodon-posts/" rel="nofollow noopener" target="_blank">https://wedistribute.org/2024/06/maven-mastodon-posts/</a>

Evan ProdromouWe're discussion <a href="https://cosocial.ca/tags/ContentNation" class="mention hashtag" rel="nofollow noopener" target="_blank">#ContentNation</a> at <a href="https://cosocial.ca/tags/Fediforum" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fediforum</a>. I really appreciate this comprehensive article at WeDistribute about the topic:<a href="https://wedistribute.org/2024/03/contentnation-mastodons-toxicity/" rel="nofollow noopener" translate="no" target="_blank">https://wedistribute.org/2024/03/contentnation-mastodons-toxicity/</a>

We DistributeThe <a class="hashtag" href="https://social.wedistribute.org/tag/contentnation" rel="nofollow noopener" target="_blank">#ContentNation</a> situation is a dumpster fire for the <a class="hashtag" href="https://social.wedistribute.org/tag/fediverse" rel="nofollow noopener" target="_blank">#Fediverse</a>. What would you do if you were building something, people misunderstood what it was, and things escalated to a point that someone loaded CSAM onto your server for the sake of reporting it? <a href="https://wedistribute.org/2024/03/contentnation-mastodons-toxicity/" rel="nofollow noopener" target="_blank">https://wedistribute.org/2024/03/contentnation-mastodons-toxicity/</a>

Sean TilleyThere seems to be some discourse about <a class="hashtag" href="https://social.wedistribute.org/tag/contentnation" rel="nofollow noopener" target="_blank">#ContentNation</a> being some kind of Fedi scraper, and I think people are overreacting. I'm not going to link to the thread, but some people were freaking out because they put in their handles into a search field and saw their profiles and posts there. It's like they didn't realize they were literally performing a Webfinger request, and were just looking at some cached data of public statuses.

Recent searches

Search options

Administered by:

Server stats:

#contentnation