Elektrine
Log in Register

#catodon

3 posts · Last used 6d

Back to Timeline
julian
julian @julian@activitypub.space · Apr 22, 2026

Catodon federating deletes of objects it doesn't own

<p>Hey <a href="https://catodon.rocks/@panos">@<bdi>panos@catodon.rocks</bdi></a>, now that I'm tracking errors encountered, I've got a bit more visibility into things that normally would've just been caught and ignored.</p> <p>Today I received a <code>Delete(Object)</code> from Catodon associated with a user from <code>catodon.rocks</code>.</p> <p>Two things:</p> <ol> <li> <p>Its <code>object</code> referenced an item outside of <code>catodon.rocks</code>, and so it failed NodeBB's actor-object match check. Normally people can't delete other peoples' posts, so I think this might be a mistake?</p> </li> <li> [...]</li></ol> Hover or focus to reveal Sensitive
Hey @panos@catodon.rocks, now that I'm tracking errors encountered, I've got a bit more visibility into things that normally would've just been caught and ignored. Today I received a Delete(Object) from Catodon associated with a user from catodon.rocks. Two things: Its object referenced an item outside of catodon.rocks, and so it failed NodeBB's actor-object match check. Normally people can't delete other peoples' posts, so I think this might be a mistake? The activity's audience matches the activity's attributedTo. While you're certainly allowed to put anything you want in there, threadiverse software uses it to point to a group actor. Wondering if this was intentional. Thanks!
0
6
0

You've seen all posts