Liked by

@fedify@hollo.social · Reply to jer

@nyquildotorg Yeah, they seemed to already update their version of Fedify!

https://github.com/TryGhost/ActivityPub/commit/6fafc7d224b1c9a8b21833769a0dc9d884781fe8

Fixed inbox signature verification · TryGhost/ActivityPub@6fafc7d

ref https://github.com/fedify-dev/fedify/discussions/361 This patches a hole in the signature verification in Fedify which allowed impersonation of actors.

1 like

jer
@nyquildotorg@gts.nyquil.org
Mobile-addicted. Web-dependent. Digital Plumber. Nerd. He/him. No-coiner.
Citizen of various fediverses over the years, this one since my first Mastodon account in January 2017. Alt-text enthusiast, lover of having his mind changed.
Boosts and quote-boosts welcome.
fediverse platform usage:
-Mastodon (January 2017 - July 2023)
-Calckey/Firefish/Iceshrimp (July 2023 - February 2025)
-GoToSocial (February 2025 - ??)