173

Authorized Fetch Circumvented by Alt-Right Developers (wedistribute.org)

submitted 9 months ago by deadsuperhero@lemmy.world to c/fediverse@lemmy.world

72 comments fedilink hide all child comments

Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.

you are viewing a single comment's thread
view the rest of the comments

[-] lily33@lemm.ee 2 points 9 months ago* (last edited 9 months ago)

Stop asking for pseuso-privacy features. The Fediverse is public by nature. Any "measures" to control access to the public posts on it are just lying to users.

Server owners should be able to control who can access their servers - but that is NOT - and should NOT be - treated as a privacy feature.