๐ New on my postroll:
Pixelfed leaks private posts from other Fediverse instances - fiona fokus
There are right ways for a developer to respond to a responsible vulnerability disclosure.
This is not one of those ways, and demonstrates (once again) that the developer behind one of the most popular ActivityPub implementations is maybe not a great steward of the thing(s) he creates.