The Gods of Mastodon went ahead and released a major security update to #Mastodon today, July 4, Independence Day -- one of the most major U.S. holidays, when families are out and about and administrators are unlikely to be around to apply the upgrade quickly as the scope of the issues becomes widely known.
They did this despite calls from security professionals not to do major security releases on major holidays unless there was significant active exploitation of the bugs, which does not appear to be the case for this release -- at least up to the time today that they released the code showing the exploits!
You can find the release info here:
https://github.com/mastodon/mastodon/releases/tag/v4.2.10
THIS is one of the reasons why Mastodon will never be a major player, because it is being handled like an amateur toy, not a professional system for people to rely on for anything of any importance at all.
I could never in good faith recommend Mastodon/Fediverse as anything other than a plaything. So much potential being flushed down the sewer unnecessarily.
Lauren Weinstein /
npub1lq…knf7e
2024-07-04 17:32:57
Author Public Key
npub1lq68asmanu3etxax9hvrj8au4h585lq8zgzujmufqsewtsz85mkskknf7ePublished at
2024-07-04 17:32:57Event JSON
{
"id": "e33ec1d2c1157f90cbe4c5538b992a657ce34a2a1e311f200174ba21f3c6871c",
"pubkey": "f8347ec37d9f23959ba62dd8391fbcade87a7c071205c96f890432e5c047a6ed",
"created_at": 1720107177,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.laurenweinstein.org/@lauren/112728943986472448",
"web"
],
[
"t",
"mastodon"
],
[
"proxy",
"https://mastodon.laurenweinstein.org/users/lauren/statuses/112728943986472448",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.laurenweinstein.org/users/lauren/statuses/112728943986472448",
"pink.momostr"
],
[
"expiration",
"1722699250"
]
],
"content": "The Gods of Mastodon went ahead and released a major security update to #Mastodon today, July 4, Independence Day -- one of the most major U.S. holidays, when families are out and about and administrators are unlikely to be around to apply the upgrade quickly as the scope of the issues becomes widely known. \n\nThey did this despite calls from security professionals not to do major security releases on major holidays unless there was significant active exploitation of the bugs, which does not appear to be the case for this release -- at least up to the time today that they released the code showing the exploits!\n\nYou can find the release info here:\n\nhttps://github.com/mastodon/mastodon/releases/tag/v4.2.10\n\nTHIS is one of the reasons why Mastodon will never be a major player, because it is being handled like an amateur toy, not a professional system for people to rely on for anything of any importance at all. \n\nI could never in good faith recommend Mastodon/Fediverse as anything other than a plaything. So much potential being flushed down the sewer unnecessarily.",
"sig": "b7c85ffe0426038849697e98c27a579b466f2e02ce7a4880258510bd0fe9ef1bc2cab0e1c066d3e35ffffd6108dfbf0266d61393eeb98fb69effb7914e180e6e"
}