Upgrade social.coop to mastodon 4.0?

might be time to upgrade now, tho? https://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp

I agree with @Christina Bowen about the security updates. Upgrading to 4.0 has never been about being on the 'bleeding edge'. 4.0 is no longer a release candidate, it's 'official' now. (and being used by LOTS of instances) It's not a risky action. The security upgrades alone should be enough reason to do it.

I believe that security issue is fixed in 3.5.5 as well, but don’t let me stop you from upgrading to 4

This security update should be done before the upgrade IMHO. Also, there is already a 4.0.2, however, one big concern I see with 4.x is the lack of a splash login/registration page, the new layout brings us to an /explore page, which shows the public timeline... This could be an issue WRT registration of new members...

I’m seeing many different threads about how confusing 4.x is, for different reasons, so aside from my previous mention, this one also stands out as wtf

1. Apparently if you click "Report" and then choose "I just don't like it" from the very limited menu of reasons for reporting, no report is actually generated. This is terrible and is going to lead to no end of frustration from users who don't understand why mods seem to be ignoring them. We already have the option to block someone without reporting, why add this pathway?

2. The only substantive reason among those limited options to click for why you're making a report is "Spam". Nothing at all about abuse. Terrible signal about priorities.

3. If I search for a username and the search is a little slow, while the UI is waiting it shows me a "You might be interested in" list of suggested follows. I dislike this anyway because algorithmic curation has done so much harm to every other social media site that's tried it, but to make things worse: every time I test it the list includes a specific user who I know has blocked me. They don't want to hear from me, why lead me to them?

https://weirder.earth/@eldang/109355565948465166

That post from @[email protected] is incorrect. I checked on my own server running 4.0.2 and replied to their post with correct info. I don't know why they believe "I just don't like it" doesn't generate a report -- it in fact does, a very detailed one. https://social.coop/@jsit/109356643758721981

I don't have the skills to help with the actual upgrade, but would love to see it happen. I for one prefer the explore / public-local front page since it lets you see what is actually going on inside the instance before you sign up. I would also make use of the hashtag-follow feature.

For sure, there are a lot of great enhancements that I'd love to see, plus I think being below 3.5 prevents media from different timelines from showing up correctly sometimes, so I'd love to see that get fixed.

There are supposed to be some significant performance improvements, too.

Not to mention the severe security concerns.

Honestly if this is still on 3.4 in December, I might start thinking more seriously about other instances.

Hi all, I'm a new user. I'd like to go to 4.02+ if possible. Below is a screenshot of reporting interface from the 4.02 instance I'm currently using.