XSS vulnerbility hack. From a mod:

https://lemmy.blahaj.zone/post/766402

Topped with lots of cream?

Thank you. That’s a very nice summary.

Thx for replying. Would you expand on the idea why VPN wouldn’t help with increasing the person’s privacy?

BTW, I have tried logging in using Tor. It pretty much works normally but slightly more slowly. Of course, Tor throws more fits depending on how the connection is created, so you are right, I personally would hate having to use it regularly.

Thx for the reply. For the sake of discussions here, if someone think they can increase the privacy by always using Tor to access all the fediverse accounts, and let’s just assume they don’t ever miss (for me, this probably is unlikely). How do you think this increases linkability to their … ?

Thx for the reply. I probably wouldn’t want discuss anything indicating illegal activities or political activism on the Fediverse. I think Reddit was just demanded to turn over some (subset?) of discussions about copyright piracy. They might get away without the subpoena altogether on the fediverse arguing the data is already public.

Also, isn’t onion service pretty much used to hide the server’s IP, but doesn’t do much about hiding anything for the end users?

Damn it, I thought it was a real story ending suspiciously. The community name is definitely not the first thing you see here. Thanks, dad.

I looked. I’d guess the ones with 0 votes are posts done by bots, possibly powered by AI. The one I looked closely posted and commented to get karma points to get past the filters to post promotions/scams in other subs. The mods, including spez himself, are not doing any filtering. I am not sure if any is done for protest, but I only looked closely at one.

edited: grammar

One upvote means at least one person appreciates you. More than that, there are no karmas or anything. You can use the votes to see the most appreciated comments, though.

I believe this is how Microsoft implements verification so that users do not have to remember their passwords. You can probably disable it in Security > Advanced security options > Send sign-in notifications.

Personally, I find this very convenient, especially when logging into a new device/app/service for the first time. However, I imagine that if someone else is trying to get into my account online, it would be the first thing I disable, switching back to entering my password by default.