Authorized Fetch Circumvented by Alt-Right Developers
Authorized Fetch Circumvented by Alt-Right Developers
wedistribute.org Authorized Fetch Circumvented by Alt-Right Developers
A controversial developer circumvented one of Mastodon's primary tools for blocking bad actors, all so that his servers could connect to Threads.
Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.
11
comments
The article doesn't say, did they fix it?
Why would they fix it?
Fixing this in general is not so easy as ActivityPub wasn't designed to prevent such things and AFAIK without some fundamental changes like proposed in Spritely or implemented in the Zot protocol it can't really prevent this from happening.
You've viewed 11 comments.