|
Top-level
The stupidest part of this is... I got curious and was messing around with the "tags" and noticed that instead of using the hashtag's name, it gives everything a number. For instance, Peertube Instance is https://app.heymaven.com/tag/154847 So I was like... hrrm, I wonder what the very first tags are. We have the following: 1 - AI 4 comments
And that, in turn, led me to find this post there - https://app.heymaven.com/discover/49680 where someone is pointing out that the numbering system can also be used to mine account info. And then down here in the comments, he also mentions that if you know who someone is, you can find their unpublished draft posts too https://app.heymaven.com/discover/55373 They say further down they've fixed this, but man that is not good. @DrakkenZero @liaizon @bsky.brid.gy the drafts thing sounds like an issue on the fedi software side though, no? mastodon & co have to be flawed for that info to be available @emllnd @liaizon @bsky.brid.gy It's drafts from within Maven, because it's also it's own platform and not just something parasiting off the Fediverse with a one-way no-back-link import. So, if you were a Maven user that was drafting for-Maven posts, until they fixed it other people could see whatever you had written whether you'd chosen to publish it or not, just by digging around in the number system. |
Gregory's Server
@DrakkenZero that says EVERYTHING....