XSS vulnerbility hack. From a mod:
Yeah2206
Topped with lots of cream?
Thank you. That's a very nice summary.
When it's auctioned, it would become the most valuable small pile of s... in the world.
Thx for replying. Would you expand on the idea why VPN wouldn't help with increasing the person's privacy?
BTW, I have tried logging in using Tor. It pretty much works normally but slightly more slowly. Of course, Tor throws more fits depending on how the connection is created, so you are right, I personally would hate having to use it regularly.
Thx for the reply. For the sake of discussions here, if someone think they can increase the privacy by always using Tor to access all the fediverse accounts, and let's just assume they don't ever miss (for me, this probably is unlikely). How do you think this increases linkability to their ... ?
Thanks for the reply. Yeah, I think this makes sense when you trust your VPN provider more than your ISP/government.
Thx for the reply. I probably wouldn't want discuss anything indicating illegal activities or political activism on the Fediverse. I think Reddit was just demanded to turn over some (subset?) of discussions about copyright piracy. They might get away without the subpoena altogether on the fediverse arguing the data is already public.
Also, isn't onion service pretty much used to hide the server's IP, but doesn't do much about hiding anything for the end users?
Maybe if the expected phenomena don't take place, then some weeds may help.
Damn it, I thought it was a real story ending suspiciously. The community name is definitely not the first thing you see here. Thanks, dad.
Supposedly, if you click on the 2FA link on a mobile, it will launch your 2FA app to capture the info. But if that doesn't happen, you can right click on the button, and copy the secret to create a record in your 2FA app manually. The app has to support SHA-256, so I think pretty much Authy, Microsoft Authenticator, Google authenticator, etc. are out. Supporting apps include 2FAS and Aegis.
If this can't be done, you should click Remove 2FA and save. Otherwise, you might loose your account. On some instances and on Firefox, you may want to do this with all the extensions disabled. Some extension seems to somehow get you logged out clicking refresh.