A controversial developer circumvented one of Mastodon's primary tools for blocking bad actors, all so that his servers could connect to Threads.

Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.

  • froggersEnglish
    650·
    10 months ago10 months ago

    anything I write on the internet should be treated as my private information. If I want to keep any conversation private, I will still post it in a public website.

    EDIT: I’m so sorry that my stupid comment offended some people. Always forget how special some people can be on this website. Once again I’m sorry for my lack of better judgement.

    • PeriodicallyPedanticEnglish
      180·
      10 months ago

      Wow, why are you so triggered just because some people didn’t think you were funny?

      • froggersEnglish
        19·
        10 months ago

        About as triggered as those who downvoted me.

        • PeriodicallyPedanticEnglish
          80·
          10 months ago

          No, you’re right. Everyone who downvoted probably also went on an angry tirade first, but they just didn’t type it out. Totally the same. 👍

      • stoy
        English
        121·
        10 months ago

        He thought he was funny, he repeated what the above poster said to repeat.

    • solrizeEnglish
      40·
      10 months ago

      I don’t think your comment was offensive per se. It was just ridiculously naive. If we are trying to build practical tools, they have to fit how things work in the real world, not how they work in anybody’s dreams. If you want to have private conversations on a public website, use encryption.