Post #3904879

@macfranc@poliversity.it @elettrona@poliversity.it woaahhh, for a moment I was like “ok, the new release that fixes this macroscopic security issue is going to come soon, right?” But then I noticed this. The release 0.17, which includes the fix, as well as many of my fixes on the ActivityPub side (some of which I pushed in February 2025) has not even been released yet! So I guess that building the latest version from git should probably be the default to go, unless you want to use software that is almost 2 years old. @writefreely@writing.exchange could you please provide some context here? Is #WriteFreely even still being actively developed? It took me time to fix stuff on the codebase, and I even signed off the CLA (no matter how much I hate that stuff). Efforts of contributors should not be wasted on a project that seems dead from any perspective you look at it. If WriteFreely is dead, then please state so clearly so we can start working on alternative blogging platforms. I was even thinking of implementing support for the Mastodon quote protocol like I did on Madblog and Akkoma, but I guess that I’ll see those changes shipped perhaps in 2030. I don’t want to be the guy who pulls water to his own side - also because Madblog doesn’t yet support multiuser scenarios, nor authentication, nor an editor, and I don’t want to rush on it. I still advise folks to use WriteFreely if they want those features. But seeing a project in this state, and which doesn’t even prioritize a security fix that basically prevents random spammers from polluting any blog…jeez, I don’t feel like I can any longer advise this project to anyone.