 From a technical standpoint, are the quote posts on non-Mastodon fedi basically just link previews? Is anybody able to check any of these for me if (on Pleroma or Misskey-based software): - People being quoted are notified that they've been quoted. - How that notification works. - If/how that notification will show up to Mastodon users who are quoted. - If you can (by copying and pasting a url) quote somebody who blocks you. - If you can bypass a block by viewing posts through a quote. 17 comments
Alternatively, if you can send me a json file of a quote post, from the perspective of Pleroma or Misskey-based software. On Mastodon, you can get the raw json through the API or by adding ".json" to a local post's url. It's important to think about security features from the perspective of how they work in reality, in addition to worst case scenarios. Worst case scenario for a quote post is exactly as bad as just a link, and not quite as bad as a screenshot. In reality, quotes are more likely to be read than links; they're most fun to post than links; and they're easier to post than either links or screenshots.  @fedilore maybe that's why Gargron wants to take time to do this the right way @me Yes. He originally didn't want them because they were pretty widely used for being mean on Twitter, but since committing to them he's wanted to address these issues. But also, it does not actually seem like there's a way to do that without making it worse. If he adds all these security features that only fully-updated Mastodon servers will recognize, then people will think they're safer than they are. @fedilore calling non-Mastodon users could be solved by a forced "DM" from the quoter @me If the contents of the post are pulled through ActivityPub and the notification is sent out as a reply with a forced tag, the risks are pretty low. But only if everybody is doing it that way. I worry that a forced tag in Mastodon-to-Mastodon quotes will give a false sense of security that it works the same way for all fedi quotes. @fedilore but quote posts are already here - and Mastodon has no power to limit how those work I could have sworn Elk Zone parsed quotes for Mastodon users, but that doesn't actually seem to be true. Does anybody know of a front-end that will allow Mastodon users to see quotes send by Akkoma and/or Misskey users? It's WelshPixie flipping me the bird that started a broader conversation about how instance-to-user moderation on fedi is basically fake, and that you should never do a user-level suspend from your instance. (I am very grateful that I have an example of this that's both so funny and relevant, while also being almost uniquely ethical for me to screenshot.)  @fedilore Protocol-wise, most software implement quotes the same way replies work. The exception would be platforms implementing [FEP-e232](https://codeberg.org/silverpill/feps/src/branch/main/e232/fep-e232.md), but I think some of the listed ones do both. I’m not sure if vanilla Pleroma does the same, I think it does, but on my personal fork I can’t quote a person without notifying them. I also have a MRF (not enabled by default on Pleroma) that forces remote posts to mention/notify the local user being quoted.
@mkljczk Okay. So the one with your tag generations a mention, where the one without doesn't. Trying to read forcementionpolicy (I'm not great at coding), it looks like it basically parses incoming posts that you'd otherwise be able to see? So unlike a real mention, it wouldn't expand privacy under Followers Only or Mentioned People Only to include you. What does the JSON look like for a quote that doesn't include a visible mention?   |
Gregory's Server
Because quote posts on Twitter/Bluesky/Facebook are first class features on a centralized platform, notifications and blocking tend to work about as well as you'd expect - even if there aren't features to prevent being quoted.
If fedi servers used ActivityPub to request the quoted post, that would allow for blocks and notifications to mostly function, but my impression is that the contents of a post are just normal link previews.