search

immers-space / guppe

Federated social groups with ActivityPub, NodeJS, Express, and Mongodb
https://a.gup.pe
GNU Affero General Public License v3.0
195 stars 15 forks source link

Spotted it posting Personal Messages on the site #20

Closed o-jasper closed 2 years ago

o-jasper commented 4 years ago

It cannot boost them, the web interface is intended to be the same as the fediverse profile, and most importantly, people don't expect this to happen.

wmurphyrd commented 4 years ago

Sorry. So a message was sent, tagging a Guppe group, but with non-public permissions? Could you explain what you do expect to happen in this circumstance?

o-jasper commented 4 years ago

If you hit PM people don't expect one of the participants to post it publicly, of course.. Especially if they don't even realize it's a bot.

wmurphyrd commented 4 years ago

Would you expect it to still deliver to other group subscribers without listing it on the public profile or just to ignore the message?

On Sun, Apr 12, 2020, at 10:03 PM, Jasper den Ouden wrote:

If you hit PM people don't expect one of the participants to post it publicly, of course.. Especially if they don't even realize it's a bot.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/wmurphyrd/guppe/issues/20#issuecomment-612727454, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACMR5KZJ3JWGPIZAYNXLADLRMJ6I5ANCNFSM4K5STCPQ.

o-jasper commented 4 years ago

I think it should ignore PMs/Followers-only toots. It shouldn't make things visible publicly that wouldn't normally be? Otherwise it might end up making a private conversation public if people forget to not-address the bot. (also it can't actually boost it so the site and the profile elsewhere might not match)

Of course PMs/etc might be able to do things, if it is explicit somehow.

wmurphyrd commented 2 years ago

no longer listing any post content in web interface