happy wednesday, coposters! we’ve got a long weekend ahead of us (it’s thanksgiving here in the US) but that doesn’t mean we haven’t been working!
we’re finishing going through the applications for the support ops role (we got 200 of them)! everyone who applied should hear from us by monday at the latest. thanks to everyone who applied!
important: privacy bug disclosure
due to an undocumented design property of the image caching service we use from Cloudflare, on rare occasions, photos uploaded to cohost may have been served to other users without having the EXIF data stripped from them, potentially allowing them to identify the location where the photo was taken. this issue most impacted Android users; in our testing, iOS devices remove location data before the image is uploaded. this issue also would have occurred only the first time the image was served (”cache miss”); EXIF data was correctly stripped for future loads.
this bug has now been fixed by managing the EXIF stripping ourselves, and we do not expect it to recur. we apologize for the privacy repercussions of this issue. if you have any questions or concerns, please contact us at support@cohost.org.
features and bug fixes
here’s what’s new this week:
- redesigned mobile layout!
- if you haven’t been on your phone in the last few hours, go check it out!
- redesigned the page switcher and navbar buttons
- this was technically part of the mobile redesign, but we shipped it a day early because it was done
- added the bookmarked tag feed
- added a “share” button for posts and comments on mobile
- this uses your OS’s native share function. you can access it via the meatball menu
- best used for getting links to posts while you’re in “home screen shortcut” mode
- added the current follow request count to the sidebar and page switcher for private pages
- added a place to change per-page settings
- get to it by clicking the gear icon next to “edit profile” on your page!
- right now the only per-page settings are adult content and private page switches, but we’ll be adding more here soon!
- added a setting to disable quick share on mobile
- we’re aware that some users are seeing issues with accidental sharing. we haven’t been able to reproduce these, so we can’t fix them yet, but if you’re having trouble you can turn it off in your settings page.
- migrated to a different system for feature flags; this should result in fewer random “UNAUTHORIZED” errors
- updated the notifications page so you can actually middle click notifications now
- updated our password hashing to avoid slowing down the entire site during heavy sign up windows
- it’s the same hashing, we just changed how we run it
- added links to the feature request and bug forum to the top of the cohost corner
- fixed a bug where 18+ posts would show uncensored in the link preview if you linked them on discord/twitter/etc.
- fixed some reoccuring display bugs around long display names
- we’ve all changed our local environment display names to max length so we should hopefully catch regressions here before they ship
- fixed a few pages that were Too Small on some screen sizes
- these were holdovers from when we switched our overall responsive break from 768px to 1024px. we have caught and fixed them.
- clarified how “read more” works in our markdown reference
- staff follow suggestions now show on the dashboard until they’re dismissed
- we heard from some users that this went away too quickly so they couldn’t easy follow us. we’re flattered that so many of you want to see what we’re saying.
- fixed some issues with how we served locales
that’s all for this week! here’s what’s coming up:
- hiring! we’re getting there!
- list of posts you’ve previously liked
- we have been in constant “just one more bug fix” mode on account deletions for a while. turns out, fully deleting accounts is difficult! we’re getting very close to done on it.
- performance improvements on iOS safari
- especially when typing comments. we’re on it.
have a good weekend, and thanks for using cohost! 
