News for hackers. Stuff that matters.
Re:Tech Journalism Doesn’t Know What to Do with Mastodon by smolder on Sunday December 25, 2022 @11:50AM (#34128683)
They control the server that runs the software. So you trust them with every https request, your communication, your password. You trust their javascript.
Re:Tech Journalism Doesn’t Know What to Do with Mastodon by notpushkin on Sunday December 25, 2022 @12:04PM (#34128808)
This. But more importantly, you trust their judgement when it comes to moderation and defederation.

While you don't understand these issues, you can either rely on somebody else's advice for that, or join a server at random and see what happens. Unless you've joined the new Gab, you should be okay – if anything goes wrong you can just migrate to another server.

As for the things you've mentioned: you shouldn't assume your communication is private anywhere on Mastodon (there's some encryption proposals, but that's a long road from now), and you definitely should use different passwords for different websites.

Re:Tech Journalism Doesn’t Know What to Do with Mastodon by nomel on Sunday December 25, 2022 @02:27PM (#34130310)
You must also trust them to read you DMs:

https://github.com/mastodon/mastodon/issues/18079