I have a report that seems like heymaven.com has indexed some DMs...
that is not a great feeling.
It seems like data that did not federate, but it seems like it did anyhow...
Not happy about this... looks like the "DMS are not private in a federated model" issue may have just gotten exploited.
The_Gibson :hackers_town: /
npub1a7…ptfef
2024-06-12 16:03:01
Author Public Key
npub1a7jwkpagj2gxep7tyz79c3wjgc2fm3wvxa03qhd987ehu839t67shptfefPublished at
2024-06-12 16:03:01Event JSON
{
"id": "d21909220a16e7e3f36670a2da0d818bb33aa5e44be81aeb9b3227698df74261",
"pubkey": "efa4eb07a892906c87cb20bc5c45d246149dc5cc375f105da53fb37e1e255ebd",
"created_at": 1718208181,
"kind": 1,
"tags": [
[
"proxy",
"https://hackers.town/users/thegibson/statuses/112604491393159326",
"activitypub"
]
],
"content": "I have a report that seems like heymaven.com has indexed some DMs...\n\nthat is not a great feeling.\n\nIt seems like data that did not federate, but it seems like it did anyhow...\n\nNot happy about this... looks like the \"DMS are not private in a federated model\" issue may have just gotten exploited.",
"sig": "07f17a79188c8301f66da4b450866dd82c9482382e4a21dc2b089ac4c83cfbfc3727de44b288a3b7f36e71873b95c879ec9b490cf11f6aed18c6ad7e9bf758f1"
}