Salta al contenuto
0
  • Home
  • Piero Bosio
  • Blog
  • Mondo
  • Fediverso
  • News
  • Categorie
  • Old Web Site
  • Recenti
  • Popolare
  • Tag
  • Utenti
  • Home
  • Piero Bosio
  • Blog
  • Mondo
  • Fediverso
  • News
  • Categorie
  • Old Web Site
  • Recenti
  • Popolare
  • Tag
  • Utenti
Skin
  • Chiaro
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Scuro
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Predefinito (Nessuna skin)
  • Nessuna skin
Collassa

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
  1. Home
  2. Categorie
  3. Technical Discussion
  4. Mastodon may expose followers-only posts to public.

Mastodon may expose followers-only posts to public.

Pianificato Fissato Bloccato Spostato Technical Discussion
iceshrimp
12 Post 7 Autori 47 Visualizzazioni
  • Da Vecchi a Nuovi
  • Da Nuovi a Vecchi
  • Più Voti
Rispondi
  • Risposta alla discussione
Effettua l'accesso per rispondere
Questa discussione è stata eliminata. Solo gli utenti con diritti di gestione possono vederla.
  • silverpill@mitra.social
    silverpill@mitra.social
    silverpill@mitra.social
    scritto su ultima modifica di
    #1

    Mastodon may expose followers-only posts to public. Is it a feature or a bug?

    For example, this reply is addressed to the followers collection (to) and the mentioned user (cc):

    https://not-brain.d.on-t.work/notes/admrkcvj3hfn5crj

    But Mastodon says the reply is "public". Anyone can view it:

    https://neuromatch.social/@kopper@not-brain.d.on-t.work/115343438096255204

    #Iceshrimp also doesn't require authorization, but you need to know the post ID to view it.

    @kopper Did you know about this?

    julian@activitypub.space kopper@not-brain.d.on-t.work phnt@fluffytail.org finchhaven@sfba.social citc@zotum.net 5 Risposte Ultima Risposta
    0
    • silverpill@mitra.social silverpill@mitra.social

      Mastodon may expose followers-only posts to public. Is it a feature or a bug?

      For example, this reply is addressed to the followers collection (to) and the mentioned user (cc):

      https://not-brain.d.on-t.work/notes/admrkcvj3hfn5crj

      But Mastodon says the reply is "public". Anyone can view it:

      https://neuromatch.social/@kopper@not-brain.d.on-t.work/115343438096255204

      #Iceshrimp also doesn't require authorization, but you need to know the post ID to view it.

      @kopper Did you know about this?

      julian@activitypub.space
      julian@activitypub.space
      julian@activitypub.space
      scritto su ultima modifica di julian@activitypub.space
      #2

      That is a little odd, and I'd think that is a violation of the implicit addressing conventions...

      If as:Public is not addressed, it is not public. End of story...

      Edit: oh, I loaded up the AP resource. to contains public, so that's ok.

      1 Risposta Ultima Risposta
      0
      • silverpill@mitra.social silverpill@mitra.social

        Mastodon may expose followers-only posts to public. Is it a feature or a bug?

        For example, this reply is addressed to the followers collection (to) and the mentioned user (cc):

        https://not-brain.d.on-t.work/notes/admrkcvj3hfn5crj

        But Mastodon says the reply is "public". Anyone can view it:

        https://neuromatch.social/@kopper@not-brain.d.on-t.work/115343438096255204

        #Iceshrimp also doesn't require authorization, but you need to know the post ID to view it.

        @kopper Did you know about this?

        kopper@not-brain.d.on-t.work
        kopper@not-brain.d.on-t.work
        kopper@not-brain.d.on-t.work
        scritto su ultima modifica di
        #3
        @silverpill up until a few minutes ago my instance was doing per-instance visibility
        kopper@not-brain.d.on-t.work 1 Risposta Ultima Risposta
        0
        • kopper@not-brain.d.on-t.work kopper@not-brain.d.on-t.work
          @silverpill up until a few minutes ago my instance was doing per-instance visibility
          kopper@not-brain.d.on-t.work
          kopper@not-brain.d.on-t.work
          kopper@not-brain.d.on-t.work
          scritto su ultima modifica di
          #4
          @silverpill (to be clear, this was a patch i had on my own instance and isn't iceshrimp functionality)
          silverpill@mitra.social 1 Risposta Ultima Risposta
          0
          • silverpill@mitra.social
            silverpill@mitra.social
            silverpill@mitra.social
            scritto su ultima modifica di
            #5

            @julian The followers-only reply is also visible from NodeBB:

            https://activitypub.space/post/https%3A%2F%2Fnot-brain.d.on-t.work%2Fnotes%2Fadmrkcvj3hfn5crj

            1 Risposta Ultima Risposta
            0
            • kopper@not-brain.d.on-t.work kopper@not-brain.d.on-t.work
              @silverpill (to be clear, this was a patch i had on my own instance and isn't iceshrimp functionality)
              silverpill@mitra.social
              silverpill@mitra.social
              silverpill@mitra.social
              scritto su ultima modifica di
              #6

              @kopper What does it mean? You return different objects depending on who signed the request?

              1 Risposta Ultima Risposta
              0
              • silverpill@mitra.social silverpill@mitra.social

                Mastodon may expose followers-only posts to public. Is it a feature or a bug?

                For example, this reply is addressed to the followers collection (to) and the mentioned user (cc):

                https://not-brain.d.on-t.work/notes/admrkcvj3hfn5crj

                But Mastodon says the reply is "public". Anyone can view it:

                https://neuromatch.social/@kopper@not-brain.d.on-t.work/115343438096255204

                #Iceshrimp also doesn't require authorization, but you need to know the post ID to view it.

                @kopper Did you know about this?

                phnt@fluffytail.org
                phnt@fluffytail.org
                phnt@fluffytail.org
                scritto su ultima modifica di
                #7
                @silverpill It breaks FO, so this is a feature.
                1 Risposta Ultima Risposta
                0
                • silverpill@mitra.social silverpill@mitra.social

                  Mastodon may expose followers-only posts to public. Is it a feature or a bug?

                  For example, this reply is addressed to the followers collection (to) and the mentioned user (cc):

                  https://not-brain.d.on-t.work/notes/admrkcvj3hfn5crj

                  But Mastodon says the reply is "public". Anyone can view it:

                  https://neuromatch.social/@kopper@not-brain.d.on-t.work/115343438096255204

                  #Iceshrimp also doesn't require authorization, but you need to know the post ID to view it.

                  @kopper Did you know about this?

                  finchhaven@sfba.social
                  finchhaven@sfba.social
                  finchhaven@sfba.social
                  scritto su ultima modifica di
                  #8

                  @silverpill

                  "Mastodon may expose followers-only posts to public. Is it a feature or a bug?"

                  I hate to break this to you, but I'm seeing this on a v4.4.3 #Mastodon instance in my /home only because of the #Hashtag #Iceshrimp you've used, which I #Follow

                  Don't know if this is good news or bad news, or none of the above

                  cc @kopper

                  1 Risposta Ultima Risposta
                  0
                  • silverpill@mitra.social
                    silverpill@mitra.social
                    silverpill@mitra.social
                    scritto su ultima modifica di
                    #9

                    @julian Well, it's public now. But it wasn't when I posted :)

                    elvecio@wizard.casa 1 Risposta Ultima Risposta
                    0
                    • silverpill@mitra.social silverpill@mitra.social

                      @julian Well, it's public now. But it wasn't when I posted :)

                      elvecio@wizard.casa
                      elvecio@wizard.casa
                      elvecio@wizard.casa
                      scritto su ultima modifica di
                      #10

                      @silverpill One thing that has always been different in Mike's software is that only authorized people can see non-public things. It is of little use to have the right address for the image, video, or file (as instead happens and happened in Mastodon Diaspora and others - almost all of them). In the software created by him, you cannot see even if you have an address/id or whatever you like.

                      silverpill@mitra.social 1 Risposta Ultima Risposta
                      0
                      • silverpill@mitra.social silverpill@mitra.social

                        Mastodon may expose followers-only posts to public. Is it a feature or a bug?

                        For example, this reply is addressed to the followers collection (to) and the mentioned user (cc):

                        https://not-brain.d.on-t.work/notes/admrkcvj3hfn5crj

                        But Mastodon says the reply is "public". Anyone can view it:

                        https://neuromatch.social/@kopper@not-brain.d.on-t.work/115343438096255204

                        #Iceshrimp also doesn't require authorization, but you need to know the post ID to view it.

                        @kopper Did you know about this?

                        citc@zotum.net
                        citc@zotum.net
                        citc@zotum.net
                        scritto su ultima modifica di
                        #11
                        @silverpill
                        For superior control of your content, suggest to use hubzilla
                        1 Risposta Ultima Risposta
                        0
                        • elvecio@wizard.casa elvecio@wizard.casa

                          @silverpill One thing that has always been different in Mike's software is that only authorized people can see non-public things. It is of little use to have the right address for the image, video, or file (as instead happens and happened in Mastodon Diaspora and others - almost all of them). In the software created by him, you cannot see even if you have an address/id or whatever you like.

                          silverpill@mitra.social
                          silverpill@mitra.social
                          silverpill@mitra.social
                          scritto su ultima modifica di
                          #12

                          @elvecio Further investigation showed that this wasn't a Mastodon's fault. There was some weirdness on behalf of the originating instance.

                          Mastodon server received a post addressed to public and I received a post addressed to followers.

                          1 Risposta Ultima Risposta
                          0
                          • Sistema ha condiviso questa discussione su

                          Ciao! Sembra che tu sia interessato a questa conversazione, ma non hai ancora un account.

                          Stanco di dover scorrere gli stessi post a ogni visita? Quando registri un account, tornerai sempre esattamente dove eri rimasto e potrai scegliere di essere avvisato delle nuove risposte (tramite email o notifica push). Potrai anche salvare segnalibri e votare i post per mostrare il tuo apprezzamento agli altri membri della comunità.

                          Con il tuo contributo, questo post potrebbe essere ancora migliore 💗

                          Registrati Accedi
                          Rispondi
                          • Risposta alla discussione
                          Effettua l'accesso per rispondere
                          • Da Vecchi a Nuovi
                          • Da Nuovi a Vecchi
                          • Più Voti


                          Feed RSS
                          Mastodon may expose followers-only posts to public.
                          @pierobosio@soc.bosio.info
                          NodeBB Contributors
                          • Accedi

                          • Accedi o registrati per effettuare la ricerca.
                          • Primo post
                            Ultimo post