We do honour requests from remote servers to delete...

All posts pixelfed's posts Post Back to profile

We do honour requests from remote servers to delete accounts, but sometimes it does not happen as expected.

So we're building a feature to automate this process so anyone can easily purge their old deleted account from any Pixelfed instance ✨

Like 10 May at 19:10 | Open on mastodon.social

4 comments

Vertana

Sensitive content

@pixelfed While this looks helpful it also seems potentially dangerous and ready to be abused. Is there anything preventing a rogue admin from deleting accounts in this fashion?

10 May at 19:21 | Open on infosec.exchange

Detun3d

@vertana
I second this.
@pixelfed

10 May at 19:26 | Open on mastodon.social

pixelfed

@vertana Can you explain? We think you are confused about this will work.

10 May at 19:32 | Open on mastodon.social

Blake Leonard

@vertana @pixelfed This mechanism, I think, checks if the remote account is actually deleted first (but how?).

10 May at 19:39 | Open on infosec.town

Go Up