Conversation

Notices

1. Zergling_man (zergling_man@sacred.harpy.faith)'s status on Saturday, 06-Apr-2024 09:03:45 JST Zergling_man

   in reply to

   • Oneesan succubus
   @lain >We will drop any support for same-domain setups in the near future, it's just not worth the risk.
   How about fuck you, I have them on the same domain with 0 risk.
   • † top dog :pedomustdie: likes this.
   • Oneesan succubus (lain@pleroma.soykaf.com)'s status on Saturday, 06-Apr-2024 09:03:46 JST Oneesan succubus
     The fine folks at akkoma released a security update that fixes some things with the diverse ways of putting stuff on your domain (uploads, stolen emoji, mediaproxy). Some of those patches will make it into Pleroma too, but for now:
     
     RUN UPLOADS AND MEDIA PROXY ON A DIFFERENT SUBDOMAIN. That prevents any impersonation issues.
     
     We will drop any support for same-domain setups in the near future, it's just not worth the risk.
     
     Check out the information provided by akkoma for details and more fine grained mitigation steps: https://meta.akkoma.dev/t/akkoma-stable-2024-03-securer-i-barely-know-her/681