@liaizon @bsky.brid.gy And that, in turn, led me to...

All posts wakest's posts Post Back to profile

And that, in turn, led me to find this post there - https://app.heymaven.com/discover/49680

where someone is pointing out that the numbering system can also be used to mine account info.

And then down here in the comments, he also mentions that if you know who someone is, you can find their unpublished draft posts too

https://app.heymaven.com/discover/55373

They say further down they've fixed this, but man that is not good.

Like 12 June at 13:18 | Wall-to-wall | Open on retro.pizza

2 comments

DELETED

@DrakkenZero @liaizon @bsky.brid.gy the drafts thing sounds like an issue on the fedi software side though, no? mastodon & co have to be flawed for that info to be available

12 June at 15:05 | Open on mas.to

The VHS Wizard 📼🧙

@emllnd @liaizon @bsky.brid.gy

It's drafts from within Maven, because it's also it's own platform and not just something parasiting off the Fediverse with a one-way no-back-link import.

So, if you were a Maven user that was drafting for-Maven posts, until they fixed it other people could see whatever you had written whether you'd chosen to publish it or not, just by digging around in the number system.

12 June at 15:08 | Open on retro.pizza