Gregory's Server"JSON interoperability issues" is not a sentence i thought i'd have to read ever
i am fucking livid
 4 comments
 @arisunz I wish this JSON thing would be specific to Matrix…
Mastodon probably still supports JSON-LD Signatures which cause this exact style of problem, plus of course breaks plausible-deniability. (Fediverse as a whole supports HTTP Signatures instead where you sign JSON/whatever as a binary blob that you only decode afterwards) @arisunz Adding to this list, the org's public response to security vulnerabilities has been... not great, basically saying "We expect users to trust servers, and security research puts our funding at risk": |
@arisunz
The creativity of fools is endless. They will find a way to break anything.