Users can brute-force their way into reading private messages with Lemmy versions below 0.19.1. I know there was the question of federation issues previously, but it appears to have been largely mitigated with the later versions at this point. Are there any plans to upgrade pawb.social?
  • airrowMEnglish
    2·
    9 months ago

    PMs were already thought to be insecure I thought… but I guess this is even more insecurity on older versions

    • AliceOPMAEnglish
      2·
      9 months ago

      Dam. They should like make ppl aware and not just Let them find out for themselves

      • airrowMEnglish
        2·
        9 months ago

        make ppl aware

        in fairness there’s this warning next to PM boxes:

        Warning: Private messages in Lemmy are not secure. Please create an account on Element.io for secure messaging.