Warning: Do not use Hive Social

Re:Warning: Do not use Hive Social by mudream4869 on Wednesday November 30, 2022 @08:55PM (#33811256)

TLDR: Mastodon is more secure than Hive Social.

[ Parent | on HN ]

Re:Warning: Do not use Hive Social by PaulsWallet on Wednesday November 30, 2022 @10:14PM (#33811872)

Is it? Can't people read your DMs on Mastodon as well? If that is your concern then seems like all things are equal. I'm being somewhat obtuse but I don't see how Mastodon is a reasonable replacement for Twitter.

[ Parent | on HN ]

Re:Warning: Do not use Hive Social by BaseballPhysics on Wednesday November 30, 2022 @10:18PM (#33811903)

> Is it? Can't people read your DMs on Mastodon as well?

"People"? No. Server operators, yes, but that's true of Twitter as well.

The disclosure, here, is that anyone can read private messages. Oh, and also edit posts.

[ Parent | on HN ]

Re:Warning: Do not use Hive Social by SrslyJosh on Thursday December 01, 2022 @02:04AM (#33813232)

Unless a service or protocol provides end-to-end encryption, you should not use its messaging features for anything truly sensitive.

And no, this is not equal. The Hive authors seem to have completely failed to implement authorization for their API, allowing (it seems) anyone with a valid auth token to make a request as any other user, granting everyone access to everyone else's data.

This is a "car company doesn't know what seat belts are" level of incompetence.

[ Parent | on HN ]

Re:Warning: Do not use Hive Social by dncornholio on Thursday December 01, 2022 @09:09AM (#33816390)

Well.. That's an understatement.

[ Parent | on HN ]