Users can brute-force their way into reading private messages with Lemmy versions below 0.19.1. I know there was the question of federation issues previously, but it appears to have been largely mitigated with the later versions at this point. Are there any plans to upgrade pawb.social?
  • AliceOPMAEnglish
    2·
    10 months ago

    Dam. They should like make ppl aware and not just Let them find out for themselves

    • airrowMEnglish
      2·
      10 months ago

      make ppl aware

      in fairness there’s this warning next to PM boxes:

      Warning: Private messages in Lemmy are not secure. Please create an account on Element.io for secure messaging.