Eugen @Gargron@mastodon.social

My dream for Mastodon is for it to be a viable choice as a publishing platform for any creator. In other words, for people to not feel like they're locked in to Twitter or Instagram if they want to be professionally successful.

Worked on improving the "about" page, with an automatically generated table of contents, better styles for headings and other elements, and integrating the "public domain blocks" (by @Thib) feature into it instead of a separate page

https://github.com/tootsuite/mastodon/pull/11885

#mastodev

How about automatic table of contents generation for Mastodon's about pages?

#mastodev

According to the-federation.info the #fediverse has crossed 3 million registered users (and this is excluding Gab)

Worked on adding extra security steps around 2FA settings: Sending e-mail notifications when 2FA is enabled/disabled, when recovery codes are reset, requiring password input before enabling 2FA and requiring password input before resetting recovery codes

Doesn't help if the password is compromised, but should help against, say, somebody sneaking onto your open desktop while you're away from the computer

https://github.com/tootsuite/mastodon/pull/11878

#mastodev

Brainstorming with @Thib how the account migration feature could be safeguarded against someone who's unrightfully gained access to your account, like with those people who didn't have 2FA on and re-used passwords.

Since attackers usually just try e-mail/password combinations from data dumps, they may not actually have access to the e-mail inbox, so requiring an e-mail confirmation for such an action (as well as account deletion) would probably be a good step.

#mastodev

I'm told that the new version of Chrome requires explicitly setting text color on ::placeholder pseudo-elements. Is that right? Am I really supposed to do that?

If an old account is compromised (using passwords from breaches from other sites) and used for spam, our moderation team notifies the owner and disables the account. Visually the account is still there but it's not functional. Please do not mistake that as us not dealing with spammers.

Work work

Hm, kinda sucks these don't get combined into one

What could this be...

#mastodev