change to LJ

[low_delta]

When you view another user's friends page, you will no longer be able to see any posts that have locks on them.

Here's how it used to work... You recently made a private post. Since you show up on user B's friends page, and you can see your private post, you see your private post on user B's friends page.

That's not how it will work now. If a post has protection, you cannot view it on someone else's friends page.

Comments

[blonnie.livejournal.com]

so i couldn't view my friends only posts on your friends page?

[low-delta.livejournal.com]

Right.

There were a lot of people complaining about this change, in lj_maintenance, but I didn't understand any of their complaints.

[blonnie.livejournal.com]

i wonder why the change was made?
i had a discussion w/someone in the past who created a journal JUST for communities. i don't think they believed me but i tried to explain that yes, they can see their locked posts on other peoples (communities) friends pages but no, unless a community member is befriended by them, that non-friends can't see the same posts. i wonder if it is because of misunderstandings like this? or i wonder if it was some security hole that had to do w/that previous 'hacking' thing?

[low-delta.livejournal.com]

The word is that the chage was made fro two reasons. One, as part of the security changes. Two, so support stopped getting those "I can see all of my private posts on my friends page!" requests.

I can't think of anything that people used to do with this feature that can't be done with filters.

[blonnie.livejournal.com]

i never went to someone elses friends page to read my own posts so i agree w/you.

[blonnie.livejournal.com]

that sentence sounds really stupid and i don't know why. maybe it's bedtime :p

[hinterland.livejournal.com]

sounds like a double bonus, both for practicality and especially for security.

[marswalker.livejournal.com]

Add to it the virtual server thing - now, instead of a set of cookies installed/modified by LJ, there are cookies for EACH friend page - because "low-delta.livejournal.com" and "livejournal.com" are two separate entities (initernet-wise).


Not sure I like this change. It's almost as necesary as putting on a cup of hot coffee, "Caution: contents are HOT!".