New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

attack vector - adding people to group #38

Open

mixmix opened this issue Feb 23, 2021 · 0 comments

Member

mixmix commented Feb 23, 2021

Currently I've set it so that if you're in a group, you replicate all the people who you also know are in the group.

This is a feature, but can also be abused - i.e. Edward adds a million people to a group, forcing them all to replicate each other!

Possible solutions:

optional feature - could make it optional through config
explicit acceptance - make it so you have to publish an "accept" message to a group before this auto-replication happens
implicit acceptance - make it so if you've published any message to a group, this means you want to auto-replication

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment