We do honour requests from remote servers to delete...

We do honour requests from remote servers to delete accounts, but sometimes it does not happen as expected.

So we're building a feature to automate this process so anyone can easily purge their old deleted account from any Pixelfed instance ✨

Like 10 May at 19:10 | Open on mastodon.social

4 comments

Vertana

Sensitive content

@pixelfed While this looks helpful it also seems potentially dangerous and ready to be abused. Is there anything preventing a rogue admin from deleting accounts in this fashion?

10 May at 19:21 | Open on infosec.exchange

Detun3d

@vertana
I second this.
@pixelfed

10 May at 19:26 | Open on mastodon.social

pixelfed

@vertana Can you explain? We think you are confused about this will work.

10 May at 19:32 | Open on mastodon.social

Blake Leonard

@vertana @pixelfed This mechanism, I think, checks if the remote account is actually deleted first (but how?).

10 May at 19:39 | Open on infosec.town

Go Up