Email or username:

Password:

Forgot your password?
Top-level
pine "two cats" trees

@djsundog what the FUCK they scraped from inside the fedi with a login? we don't expose posts anywhere but they got ours

15 comments
pine "two cats" trees

@djsundog ohohoho time to have a go at enforcing my bio

DJ Sundog - from the toot-lab

@t54r4n1 I'd laugh so hard as you took your fedi followers out to the nicest dinner the twin cities have to offer after the settlement check came through hahaha

DELETED

@t54r4n1 Do it! You specified the licensing terms and they accepted. Send them the bill.

@djsundog

DJ Sundog - from the toot-lab

@t54r4n1 I have a feeling they set up a fedi server specifically to get around authorized fetch issues

wakest ⁂

@djsundog @t54r4n1 wait so you had AUTHORIZED FETCH turned on that they still got all your shit?

wakest ⁂

@t54r4n1 @djsundog that means they were doing something explicitly fishy right? like that means you can't just hit the API like a normal client and ask for some posts

Len ♡

@liaizon fwiw, authorized fetch is only going to stop another signed activitypub request if you have the domain suspended or operate on an allow list. Any legitimate AP request that is signed will go through otherwise.

I feel like they are pulling from mastodon.social's API streaming endpoint. So posts that end up on m.s' federated timeline are going to end up on there

@djsundog @t54r4n1

DJ Sundog - from the toot-lab

@witchy @liaizon @t54r4n1

so now that Jimmy jumped in thread and I had a quick look at his masto.soc profile, it looks like they are indeed implementing activitypub - mastodon.social/@jsecretan/wit - so, defederating from maven.ly should help; looks like they're currently using staging.maven.ly (see test account staging.maven.ly/mastodon/acto )but blocking the TLD is deffo the move imho

#fediblock

james

@djsundog @witchy @liaizon @t54r4n1

jesus fuck, thanks for this.

app.heymaven.com/profile/55909 found myself and other strangeobject users. will chat with Esther in a bit and move to suspend the entire domain, and tell our users how to opt out individually.

fucks sake

DJ Sundog - from the toot-lab replied to james

@james @witchy @liaizon @t54r4n1

always happy to spend a few minutes trying to keep the commons clean of the trash that invariably blows in haha ❤️

Jérôme

@liaizon @djsundog @t54r4n1 authorized fetch isn't meant to block a fedi server from federating. It's only when you blocked a server that authorized fetch comes into action.

Some details here: hub.sunny.garden/2023/06/28/wh

Go Up