744
PSA: You can't delete photos uploaded to Lemmy. So don't (accidentally) upload a nude (tech.michaelaltfield.net)
submitted 2 years ago by to c/technology@lemmy.world
272 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 years ago (1 child)

Are updates authenticated? Or can I send an update to lemmy.world from 123.123.123.123 (which is not the IP address of feddit.de) that you have edited your comment to say "I don't like pizza"?

If updates are not authenticated this really could be a big problem.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago*

    You cannot do that, no. Edits are authenticated in the sense that the request must come from the instance of the user.

    Your admin could in principle send such a request for you. But then you're talking about a malicious admin and then all bets are off. Obviously admins are in full control of everything on their own instance, including being able to edit their own users stuff. Not that any reasonable admin would do that.

  • permalink
  • fedilink
  • source
  • parent