Follow
fuchsiaaaaaaaaaaaaaaaaa
..... i go over to the pleroma user i blocked *ages ago* and find a recent toot of mine boosted on their profile.
our instance has authorized fetch on.
what the fuck.
@erikk afaik authenticated fetch is supposed to fix this by every instance basically asking back to mine if they can see it, but of course it only takes a bit of malicious server software to circumvent it..
@tastytea @erikk that's exactly what authorized fetch prohibits, https://docs.joinmastodon.org/admin/config/#authorized_fetch except it doesn't give a shit about user-level blocks I guess
@f0x Maybe via an other account tha tboosted it? but not sure how this works in mastodon.