173

Authorized Fetch Circumvented by Alt-Right Developers (wedistribute.org)

submitted 11 months ago by deadsuperhero@lemmy.world to c/fediverse@lemmy.world

72 comments fedilink hide all child comments

Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.

you are viewing a single comment's thread
view the rest of the comments

[-] ttmrichter@lemmy.world 2 points 11 months ago

Matrix [...] has a kind of rough UX and, IIRC resource-intensive server software. We should work toward improving that.

Except that I get the vibes from the Matrix community that the shit UX is part of the attraction because it does a wonderful job of gatekeeping.

I don't hold out much hope for Matrix working out ever, but perhaps someday someone will use it as inspiration for making something that doesn't suck.