fsniper » posted to support
Private feed attachments are public. Anyone can reach them via their link. This is an exploitation of privacy.
This is a known issue. But the only way to get URLs of such attachments is with the help of someone who has access to the private post. But then the same person can just make a screenshot of a private post, save the attachment and republish it, or copy-paste the post text. But this will be fixed with the new images backend. ‎- псы в рапиде
@fsniper et al: if you have any particular concerns about this right now — please send me direct message (https://mokum.place/filter/directs?to=squadette), and we'll try to find some quick solution. Thanks, ‎- псы в рапиде
Nope. I am not private enough. Eitherway, bruteforce exploitable. ‎- fsniper