masto meta on privacy, stuff that bugs us, 1/? Show more
- when sending a DM or making a private post, typing someone's @ makes them receive the post as well, which causes major confusion. imagine dming your admin "hey um @email@example.com really hurt me, can I talk about that" and then having that show up in the harmful person's DMs. this also applies to private posts, which are normally followers only
- you can't boost something without it being visible on your public profile, + notifying the poster.
masto meta on privacy, stuff that bugs us, 2/? Show more
the notifying the poster is actually worth discussing whether or not that's a good idea, *but* it's worth noting that this differs massively from private accounts on Twitter, where you cannot see anything that a private account does until they accept your follow request. boosts being on a public timeline means that you can just peruse a kink account timeline and know what someone's into without them wanting that at all, and it's really offputting.
masto meta on privacy, stuff that bugs us, 3/? Show more
- this is a problem we got from twitter, you can see the replies to a private post you can't see. this becomes apparent in a chain like this:
people X, Y, and Z exist. you follow Y and Z. X makes a private post you can't see. Y replies, and because you follow Y, you have permission to see that, but you probably won't notice it. Z replies to Y, and now it's a conversation between two people you follow, and on your timeline.
masto meta on privacy, stuff that bugs us, 4/? Show more
also, even with just persons X and Y there, this is still a privacy breach. If Y replies to X and you follow Y, you will see Y's reply to X in the "toots and replies" column of their posts.
This also affects posts by people you blocked or muted, or those from others who block you, last we checked!
masto meta on privacy, stuff that bugs us, 6/6 Show more
one last thing, an example of why private replies are badly handled rn, with silly superhero stuff:
Superman has a main on masto. he has a private too. some of his mutuals use only one account and follow both! on his private, he feels safe letting his mutuals know he's secretly Clark Kent.
one mutual replies "omg you're Clark? cool okay!"
anyone who follows that mutual can find out that Superman is Clark Kent, even with his amazing glasses disguise.
Welcome to the Sins Center! This is a private instance for a certain plural system.