heads up, this account may be going away soon so if you haven't yet followed @[email protected] this is a good time
i make pretty pictures of abstruse math:
http://faec.me
i make songs:
http://beadysea.bandcamp.com
umm... so it's the intended behavior that private posts get federated as non-private, with no barriers to resharing?
that's... a serious problem.
A word of warning to anyone upgrading to Mastodon 1.3(.1)!!!
Starting with 1.3(.1) Private posts will federate! But they don't do so securely! Warnings are built in but be aware that if you have followers on GNU Social, Friendica, or postActiv then they will **NOT** know that your post is marked private/followers-only!! And they **will** be able to boost it!! Once they do so, it becomes a public post
This is not opt-in, it just happens post-update
If this worries you, go audit your followers