What are the cybersecurity weaknesses of the Fediverse?

Scientician@waveform.social to Asklemmy@lemmy.ml – 127 points –

Most of us are Reddit refugees, and probably clicking more random links than we ever did before on websites we've never seen before. This whole experience feels like the old internet, but also throws up insane red flags with a modern internet perspective. What are the cybersecurity weaknesses we should all be looking for, and what are the best practices?

Here's my reason for posting this. As I search for new communities across instances to follow, I sometimes end up clicking a link and I'm no longer logged in. In the corner, that could be a Sign In link or it could be phishing. It's likely due to me not understanding how to properly navigate this system, but there's nothing stopping someone from setting up a sight like this as far as I know.

Thoughts?

65

You are viewing a single comment

Thanks for the explainer! Doing some testing cause your example didn’t hyperlink on Memmy

c/tech@pawb.social /c/tech@pawb.social !c/tech@pawb.social !tech@pawb.social test text /c/tech@pawb.social /c/Lemmy@lemmy.ml

Weird. Not sure when your example didn’t link, because it did in my comment ¯\(ツ)

Edit: I'm back on browser. Everything that hyperlinked works properly. It's a Memmy issue

Okay I learned a few things, though they may be specific to Memmy.

  1. The /c/community@instance works, and opens the links in the app, rather than browser
  2. If you have text in front of your link, it doesn’t work. Might be a Memmy issue.
  3. I need to test, but I think #2 is responsible for the Null errors I’ve been getting when text is hyperlinked.

Text testing #3 - confirmed, this returns the Null error.

Now without prior text

test - this also didn’t work

test! - using a link beginning with ! Also didn’t work. Hmm.

Edit from browser: Hyperlinked text isn't working properly in Memmy

I love the "show source" button which gives access to how the tests are made.