i make pretty pictures of abstruse math:
http://faec.me
i make songs:
http://beadysea.bandcamp.com
@noelle ahh -- so it's not all federation, just non-masto federation?
ok, that's still somewhat concerning but much less bad.
umm... so it's the intended behavior that private posts get federated as non-private, with no barriers to resharing?
that's... a serious problem.
A word of warning to anyone upgrading to Mastodon 1.3(.1)!!!
Starting with 1.3(.1) Private posts will federate! But they don't do so securely! Warnings are built in but be aware that if you have followers on GNU Social, Friendica, or postActiv then they will **NOT** know that your post is marked private/followers-only!! And they **will** be able to boost it!! Once they do so, it becomes a public post
This is not opt-in, it just happens post-update
If this worries you, go audit your followers