But this is a pretty wild flaw. The fact that even an admin can’t reliably delete photos from their own instance? That’s begging to be exploited by bad actors. What happens when it’s porn (whether kids or unconsenting adults)? It’s core functionality that you have to have.
This post provides a fairly detailed claim of the opposite. Federation isn’t part of the issue he’s referring to at all. It’s that deleting the image post doesn’t delete the direct link to the file, and that doing so as an admin is really convoluted. He goes through the issue and his effort with an admin trying to help in a decent bit of detail.
I can’t actually test myself because I don’t have a server, but as far as I’m concerned the issue he’s claiming is a complete showstopper.
It’s not super straight forward, that’s true. But it’s not that hard I would say. But I’m a professional software engineer, I dunno if all admins find it as easy.
I agree with your core concept.
But this is a pretty wild flaw. The fact that even an admin can’t reliably delete photos from their own instance? That’s begging to be exploited by bad actors. What happens when it’s porn (whether kids or unconsenting adults)? It’s core functionality that you have to have.
Admins can definitely delete photos from their own instance. The problem is deleting it from all instances; that is hard.
This post provides a fairly detailed claim of the opposite. Federation isn’t part of the issue he’s referring to at all. It’s that deleting the image post doesn’t delete the direct link to the file, and that doing so as an admin is really convoluted. He goes through the issue and his effort with an admin trying to help in a decent bit of detail.
I can’t actually test myself because I don’t have a server, but as far as I’m concerned the issue he’s claiming is a complete showstopper.
It’s not super straight forward, that’s true. But it’s not that hard I would say. But I’m a professional software engineer, I dunno if all admins find it as easy.
It’s also hard for admins to delete it from their own instance:
This is just a feature request to do it via the web interface, you can still do it manually on the server without too much effort.