this post was submitted on 04 Mar 2024
744 points (98.2% liked)

Technology

59672 readers
2852 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
744
PSA: You can't delete photos uploaded to Lemmy. So don't (accidentally) upload a nude (tech.michaelaltfield.net)
submitted 8 months ago by [email protected] to c/[email protected]
271 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 2 points 8 months ago (1 children)

Are updates authenticated? Or can I send an update to lemmy.world from 123.123.123.123 (which is not the IP address of feddit.de) that you have edited your comment to say "I don't like pizza"?

If updates are not authenticated this really could be a big problem.

[โ€“] [email protected] 3 points 8 months ago* (last edited 8 months ago)

You cannot do that, no. Edits are authenticated in the sense that the request must come from the instance of the user.

Your admin could in principle send such a request for you. But then you're talking about a malicious admin and then all bets are off. Obviously admins are in full control of everything on their own instance, including being able to edit their own users stuff. Not that any reasonable admin would do that.