LJ’s latest PrivacyFail

I’ve seen a lot of news going around about this, but for those of you who haven’t, LJ has just turned on new functionality to crosspost to Facebook and Twitter.

On the face of it this seems fine. I crosspost regularly, as y’all probably know; all my posts these days originate from my WordPress blogs, but from there they head out to LJ, Dreamwidth, Facebook, and Twitter all at the same time. I’m fine with LJ allowing that to happen for stuff that originates on LJ.

What I’m not fine with is that you can apparently now also crosspost comments. Including comments on locked posts, or posts which are set to screen all comments. The crossposted comments will include a link back to the original post–and if that post is locked, sure, only the people who are authorized to see it will still see it. But there’s no way of knowing if those crossposted comments might quote bits of the original post.

So there’s big privacy fail here. There’s also just general fail of manners, because seriously, it’s just rude to link back to locked posts that people on other sites can’t read.

I wouldn’t have been turning on this functionality anyway since my crossposting originates off of LJ and I therefore do not need it. But I’m leaving it off also on general principle just because of this big gaping security hole. I encourage you all to do the same. Also, while I don’t often post locked posts or posts with screened comments, I do ask that if I do, please don’t crosspost any comments off of them.

The FAQ post about the new functionality is here. The new news post that mentions it is here.

If you feel passionately about this, I encourage you to submit feedback to LJ about it.

If you feel really passionately about this, enough to bail on LJ, I have Dreamwidth invite codes. Let me know if you want one.

Mirrored from annathepiper.org.

LJ’s latest PrivacyFail

I’ve seen a lot of news going around about this, but for those of you who haven’t, LJ has just turned on new functionality to crosspost to Facebook and Twitter.

On the face of it this seems fine. I crosspost regularly, as y’all probably know; all my posts these days originate from my WordPress blogs, but from there they head out to LJ, Dreamwidth, Facebook, and Twitter all at the same time. I’m fine with LJ allowing that to happen for stuff that originates on LJ.

What I’m not fine with is that you can apparently now also crosspost comments. Including comments on locked posts, or posts which are set to screen all comments. The crossposted comments will include a link back to the original post–and if that post is locked, sure, only the people who are authorized to see it will still see it. But there’s no way of knowing if those crossposted comments might quote bits of the original post.

So there’s big privacy fail here. There’s also just general fail of manners, because seriously, it’s just rude to link back to locked posts that people on other sites can’t read.

I wouldn’t have been turning on this functionality anyway since my crossposting originates off of LJ and I therefore do not need it. But I’m leaving it off also on general principle just because of this big gaping security hole. I encourage you all to do the same. Also, while I don’t often post locked posts or posts with screened comments, I do ask that if I do, please don’t crosspost any comments off of them.

The FAQ post about the new functionality is here. The new news post that mentions it is here.

If you feel passionately about this, I encourage you to submit feedback to LJ about it.

If you feel really passionately about this, enough to bail on LJ, I have Dreamwidth invite codes. Let me know if you want one.

Mirrored from annathepiper.org.

Dreamwidth rollcall

Out of general curiosity, who all out there on my LJ Friends list has a Dreamwidth account and is preferring to use Dreamwidth over LJ these days?

If I don't already have you on my Circle over yonder, sing out.