Mima-sama

Even more shocking is the revelation that somehow, even private DMs from Mastodon were mirrored on their public site and searchable. How this is even possible is beyond me, as DM’s are ostensibly only between two parties, and the message itself was sent from two hackers.town

WHAT THE FUCK? There should have been no way that #Maven was able to read DMs, even if they're poorly coded (should be importing Public posts only) and the DMs are not E2EE.

I guess the common wisdom of not trusting the privacy of #Mastodon DMs is very correct all along. ​​

Oh, and I was skeptical of whether this is block worthy (don't want another #ContentNation or #Awakari incident again), but this definitely is #fediblock worthy considering their casual response. Reading someone else's DMs is never acceptable. This flaw should've been acknowledged and reported to Mastodon (and perhaps other #fediverse developers too just in case).

#fediversemeta

RE: https://wedistribute.org/2024/06/maven-mastodon-posts/