Email or username:

Password:

Forgot your password?
wakest's posts Post Back to profile
Top-level
DJ Sundog - from the toot-lab

@liaizon

hate it.

for the record, I emailed jimmy@heymaven.com when I saw your post and checked out their T&Cs. I informed him that he was violating my content licensing by scraping the toot-lab and gave him a reference link to my shadow profile on their service, and that if they persisted in misusing my posts I'd have to look at legal remedies, and he just replied and said he has "removed the data and will work this week to prevent future ingestion. Thanks and sorry for the inconvenience."

so, super annoying and mega-manual opt-out process, but the profile page pretending to be me is indeed now removed.

12 June at 13:51 | Wall-to-wall | Open on toot-lab.reclaim.technology
23 comments
pine "two cats" trees

@djsundog how'd you find your shadow-profile?

12 June at 13:53 | Open on mspsocial.net
DJ Sundog - from the toot-lab

@t54r4n1 I searched for "toot-lab" on their web client and it came up

12 June at 13:53 | Open on toot-lab.reclaim.technology
pine "two cats" trees

@djsundog what the FUCK they scraped from inside the fedi with a login? we don't expose posts anywhere but they got ours

12 June at 13:55 | Open on mspsocial.net
pine "two cats" trees

@djsundog ohohoho time to have a go at enforcing my bio

12 June at 13:56 | Open on mspsocial.net
DJ Sundog - from the toot-lab
DJ Sundog - from the toot-lab

@t54r4n1 I'd laugh so hard as you took your fedi followers out to the nicest dinner the twin cities have to offer after the settlement check came through hahaha

12 June at 13:58 | Open on toot-lab.reclaim.technology
DELETED

@t54r4n1 Do it! You specified the licensing terms and they accepted. Send them the bill.

@djsundog

12 June at 15:14 | Open on mastodon.online
DJ Sundog - from the toot-lab

@t54r4n1 I have a feeling they set up a fedi server specifically to get around authorized fetch issues

12 June at 13:56 | Open on toot-lab.reclaim.technology
wakest ⁂

@djsundog @t54r4n1 wait so you had AUTHORIZED FETCH turned on that they still got all your shit?

12 June at 14:04 | Open on social.wake.st
pine "two cats" trees
wakest ⁂

@t54r4n1 @djsundog that means they were doing something explicitly fishy right? like that means you can't just hit the API like a normal client and ask for some posts

12 June at 14:16 | Open on social.wake.st
DELETED

@liaizon fwiw, authorized fetch is only going to stop another signed activitypub request if you have the domain suspended or operate on an allow list. Any legitimate AP request that is signed will go through otherwise.

I feel like they are pulling from mastodon.social's API streaming endpoint. So posts that end up on m.s' federated timeline are going to end up on there

@djsundog @t54r4n1

12 June at 14:33 | Open on h-i.social
wakest ⁂
DJ Sundog - from the toot-lab

@witchy @liaizon @t54r4n1

so now that Jimmy jumped in thread and I had a quick look at his masto.soc profile, it looks like they are indeed implementing activitypub - mastodon.social/@jsecretan/wit - so, defederating from maven.ly should help; looks like they're currently using staging.maven.ly (see test account staging.maven.ly/mastodon/acto )but blocking the TLD is deffo the move imho

#fediblock

12 June at 15:20 | Open on toot-lab.reclaim.technology
james

@djsundog @witchy @liaizon @t54r4n1

jesus fuck, thanks for this.

app.heymaven.com/profile/55909 found myself and other strangeobject users. will chat with Esther in a bit and move to suspend the entire domain, and tell our users how to opt out individually.

fucks sake

12 June at 15:22 | Open on strangeobject.space
DJ Sundog - from the toot-lab replied to james

@james @witchy @liaizon @t54r4n1

always happy to spend a few minutes trying to keep the commons clean of the trash that invariably blows in haha ❤️

12 June at 15:23 | Open on toot-lab.reclaim.technology
Jérôme

@liaizon @djsundog @t54r4n1 authorized fetch isn't meant to block a fedi server from federating. It's only when you blocked a server that authorized fetch comes into action.

Some details here: hub.sunny.garden/2023/06/28/wh

12 June at 14:58 | Open on jasette.facil.services
Esther Payne :bisexual_flag:

@djsundog @t54r4n1 I just searched for my name. It's there.

😒

@nexusofprivacy had you heard of maven?

12 June at 15:22 | Open on chaos.social
Brian Hawthorne

@djsundog @t54r4n1 I don’t see a “search” feature on their UI. Nearly everything I click asks me to login.

[ Update: I found the search box finally. Looks like there are only posts from one infosec.exchange account. ]

12 June at 15:23 | Open on infosec.exchange
DJ Sundog - from the toot-lab

@bhawthorne you have to click the "try web app" button next to the play store app buttons to get sent to app.heymaven.com/discover which then has a search box at the top

12 June at 15:24 | Open on toot-lab.reclaim.technology
Brian Hawthorne

@djsundog @t54r4n1 Thanks. Apparently I AM there. Search didn’t find bhawthorne, but did find Brian Hawthorne.

12 June at 15:27 | Open on infosec.exchange
Go Up