RussNov 20, 2022

I have a request.

Bad actors will soon figure out - if they haven't already - that setting up impersonations of important organizations now will allow them to set off an explosion of chaos and confusion at a time of their choosing.

So if you run an account for an organization (especially #LGBTQ), please set up link verification between your Mastodon account profile and your organization's website.

If not, please boost.

Instructions are here under "Link Verification":
https://docs.joinmastodon.org/user/profile/

Setting up your profile - Mastodon documentation

Get started with your new account.

Show threadLambda
@theruss does link verification happen only on the user's instance, or do other instances re-verify the links? In other words, can a bad actor simply set up their own instance that shows arbitrary links as verified for everyone?
Nov 20, 2022 at 10:46amWeb
Show threadRussNov 20, 2022

@lambda That's a fascinating question, and I'm not sure off the top of my head. It looks like this is the relevant code, but I'm not up to date on my Ruby:

https://github.com/mastodon/mastodon/blob/main/app/models/account/field.rb

mastodon/field.rb at main · mastodon/mastodon

Your self-hosted, globally interconnected microblogging community - mastodon/field.rb at main · mastodon/mastodon

GitHub