I periodically revisit alternative web clients for Mastodon, to see if anyone is doing anything more interesting than just squirting your timeline at you as-is.
I just found Phanpy (https://phanpy.social), which I really like. It visually distinguishes boosts and threads, and expands posts without leaving the timeline (such a low bar!). It also has a really nice modern stylesheet. I'm going to try using it exclusively for a while.
@confluency
POTENTIAL #SECURITY THREAT: The above website, #phanpyDotSocial is #CloudGlare and may be a #socialEngineering attack on #fediverse users to open them up to #accountTakeover.
If the above website asks one to login to ones #mastodon instance with their password then its a CloudGlare #phishing website/#honeypot.
We will not access on ethical grounds.
Tagging some boosters to warn them @njoseph @kkremitzki @michelin
@dsfgs @njoseph @kkremitzki @michelin Can you elaborate on what you think the threat model is? What is "CloudGlare"? Is this a typo, or a specific security criticism of CloudFlare?
The site does *not* prompt for a password; it uses the same app authorization mechanism as other client apps.
It's listed as an alternative client on the official Mastodon website: https://joinmastodon.org/apps If you believe that it's insecure, you should report an issue in the website repository: https://github.com/mastodon/joinmastodon/issues