Is that what you found out during your experiments?
That seems like a really inefficient and useless implementation to have all instances provide those details to one another, when every instance can simply keep track of it for their own users and pass along the total number.
Wow, didn't even know this existed. What hot garbage.
Then again, like you, I don't know why I'm surprised.
Huffman et al. straight up admitted that's how they got Reddit off the ground, by making posts under fake accounts: https://arstechnica.com/information-technology/2012/06/reddit-founders-made-hundreds-of-fake-profiles-so-site-looked-popular/
Definitely!
I've deleted all my Reddit accounts, but from time to time I remember seeing something on some subreddit way back when that would be useful for something I'm currently working on and try to search for it.
This time I found a rabbit hole in the process and couldn't help but share what I found.
That sounds like a gaping security hole, but with how likely it is that you lock yourself out with the current 2FA implementation, I can't be mad about it.
If all else fails you could also reach out to the admin of your instance I suppose and see if they can disable 2FA on your account, but I figured it's best to avoid the headache altogether and just not log out until you're 100% the 2FA works properly.
That's also a good way of verifying! As long as you go through the login process somewhere different than your current browser window you should be able to make sure it works properly.
Current 2FA implementation in Lemmy is a bit janky with the risk of being locked out.
First things first: DO NOT UNDER ANY CIRCUMSTANCES LOG OUT UNTIL YOU’RE 100% SURE YOUR AUTHENTICATOR WORKS AND THAT YOU CAN LOGIN USING ITS GENERATED 2FA CODE
Now that that’s out of the way, here are some steps to follow:
If you can’t get it to work then you can disable it in the window you’re still logged into.
If you share which authenticator you use, people might be able to give you more specific instructions to get you through step 1.
Whatever you do, don’t log out. You will be locked out!
Unlike most common implementations, there is no built in step to verify if you can successfully generate a TOTP before 2FA is fully enabled.
Pro tip: if you do insist on using Google scroll to the bottom until you see a notice like the one below.
You can then click on the complaint to see the URLs that were removed.
They’ve wisened up a bit and now require a (throwaway) email to access the links, but chances are that if you’re looking for something more obscure, the link you seek is still there.
Typical Lemmy experience, haha.
Honestly has its charms, gives me the feeling of nostalgia, like we're back in the early 2000's.
Another such rough edge is that comments sometimes get posted twice, like your comment
I agree transparency is a good thing in this space.
There are already services that allow for some level of transparency in terms of how donations are spend, like https://opencollective.com
But perhaps there are others that provide similar tools?
Currently watching Hijack and it’s pretty good so far.
Also looking forward to season 2 of Foundation.
I would expect they’d collate that information and pass it on at regular intervals to the instance that holds the true version of the post, who then subsequently disseminates that information to subscriber instances.
Then again, I guess you could collate the detailed information in a similar manner.
Not disputing what you’re saying, I assume you’ve tested this out and that’s what you’re reporting, just commenting on the choices made by the project to implement it this way.