Recent searches
Search options
I periodically revisit alternative web clients for Mastodon, to see if anyone is doing anything more interesting than just squirting your timeline at you as-is.
I just found Phanpy (https://phanpy.social), which I really like. It visually distinguishes boosts and threads, and expands posts without leaving the timeline (such a low bar!). It also has a really nice modern stylesheet. I'm going to try using it exclusively for a while. 
@confluency elk.zone works for me
@confluency Trying it out after your reco and looks really nice!
@confluency
POTENTIAL #SECURITY THREAT: The above website, #phanpyDotSocial is #CloudGlare and may be a #socialEngineering attack on #fediverse users to open them up to #accountTakeover.
If the above website asks one to login to ones #mastodon instance with their password then its a CloudGlare #phishing website/#honeypot.
We will not access on ethical grounds.
Tagging some boosters to warn them @njoseph @kkremitzki @michelin
@dsfgs @njoseph @kkremitzki @michelin Can you elaborate on what you think the threat model is? What is "CloudGlare"? Is this a typo, or a specific security criticism of CloudFlare?
The site does *not* prompt for a password; it uses the same app authorization mechanism as other client apps.
It's listed as an alternative client on the official Mastodon website: https://joinmastodon.org/apps If you believe that it's insecure, you should report an issue in the website repository: https://github.com/mastodon/joinmastodon/issues
Thanks @confluency for info that it uses tokens. Has issues, though fewer. One still must trust the third-party won't engage in account takeover actions or network level #tracking/telemetry.
According to a popular #adblocker it does fatech bad cloud(G)lare #telemetry js.
Horrified M'don would endorse untrustable third-parties, but unsurprised.
(our instance deletes external toots after a while, for reference is response to https://hachyderm.io/@confluency/110978455318359543) @njoseph @kkremitzki @michelin