17 replies

1. Matt Wilcox 1 min later

   @zachleat 4.0.2 I hope... somewhat bad security issues on 4.0.0 and 4.0.1, apparently. https://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp

   1. Zach Leatherman 2 min later

      @mattwilcox yeah, it is 🙌🏻

      1. Matt Wilcox 5 min later

         @zachleat 🎊 👍

2. Will Boyd 35 min later

   @zachleat ooh I like how you can still see past versions, in case anyone tries to pull some edit shenanigans

   1. Zach Leatherman 39 min later

      @lonekorean yeah I see a little asterisk too

      1. 0x1C3B00DA 7 hr later

         @zachleat @lonekorean It seems like none of the edit indicators are available on other software, though. So not everybody is going to be aware of edits
         1. Zach Leatherman 7 hr later

            @0x1C3B00DA @lonekorean this is likely just a byproduct of having unofficial clients—good clients will add support! 4.0 only just came out!

            1. 0x1C3B00DA 7 hr later

               @zachleat @lonekorean Sorry I could have been more clear. I didn't mean clients, I meant servers running other fediverse software
               1. Zach Leatherman 7 hr later

                  @0x1C3B00DA @lonekorean oh, hmm!

            2. Will Boyd 8 hr later

               @zachleat @0x1C3B00DA@stereophonic.space ok this is weird, I'm seeing this (what I'm replying to right now) but have no idea what the context is, I don't see a thread or parent post. haha what is this?

3. Ondřej Pokorný 1 hr later

   @zachleat Are you still allowed to call them toots once you're on 4.0, though?

   https://github.com/mastodon/mastodon/commit/628c177ebe50defab67f2e210cfd28719cf54c82

   1. Zach Leatherman 1 hr later

      @ondra toots 4 life 😅

4. mortendk 🤘 1 hr later

   @zachleat in trying to tell myself I don’t need my own instance …

   1. Zach Leatherman 1 hr later

      @mortendk to be fair I did not upgrade it—masto.host did 😅

      1. mortendk 🤘 2 hr later

         @zachleat fair - i did look at it a bit, and was thinking hmmm it looks tempting but i for once is trying not to let the geek adhd take over and jump on it

         Is there anything really cool besides of "my own domain name" and yes its you who takes it down in the end at the price cheaper than ElonVerification(tm)

         1. Zach Leatherman 2 hr later

            @mortendk yeah control over the entire moderation and admin panel is quite nice (and allows me to add my own emoji hi).

            1. mortendk 🤘 2 hr later

               @zachleat ill have a long talk with my boss (read bulldog) and he agrees my freelance shop needs this

               Its probably gonna end with a ton of football (aka soccer for you americans) nerds yelling at instance ... but lets see where it goes next week when they open up again