p (p@freespeechextremist.com)'s status on Thursday, 15-Oct-2020 03:11:20 JST
p:hacker_f::hacker_s::hacker_e:I have removed Admin-FE ( https://freespeechextremist.com/notice/A08tOTM7fZexeWtf1M / https://pleroma.mouse.services/objects/56e02653-18df-4622-a80b-f3caab97e196 ) because it apparently allowed admins to easily see DMs. Admin-FE was half-broken on FSE anyway, and I only used it to reload the emoji anyway.Fuck's sake, I don't know who thought it was a good idea to make it convenient to rifle through people's DMs. This is goddamned brain-damage.Don't get me wrong: I have access to the machine, I have the DB backups, I can read DMs (with some effort). You should not trust a server you do not control. I haven't read anyone's DMs and I don't plan to (but I am an admin and you should not trust admins), but on Pleroma it's apparently just a single checkbox and then you can read people's DMs instead of groping the database, which is what I thought it required.So, anyway, what this means for your weekend is that emoji updates are going to be slower and that I was technically incorrect all the times I said it was a pain in the ass to rifle through DMs. Apparently it is not a pain in the ass.I have filed an issue for this; if you have an opinion, you might want to weigh in: https://git.pleroma.social/pleroma/admin-fe/-/issues/163
@sjw Yeah, I know that. I'm not trying to fix malicious admins, I'm trying to eliminate one-click shopping. Right now, there's not even an "are you sure?" dialog box.
@p Yeah, it's the same way on Mastodon. DMs were never really designed to be private. That's why they're DMs and not PMs. Besides, if you want privacy that's what chats are for or use something like xmpp or jami.That being said, you can easily build admin-fe with only the components you want. Could probably build it solely for emoji management. https://git.pleroma.social/pleroma/admin-feYou can also just reload emojis from the elixir shell whilst Pleroma is running. Could also just use the API toohttps://docs-develop.pleroma.social/backend/API/admin_api/#post-apipleromaadminreload_emojiShouldn't be too hard to build a scrip that automates adding files to the pack.json or whatever the name of that file is.