14 upvotes, 2 direct replies (showing 2)
View submission: An Update Regarding Reddit’s API
The safety concern is that there are “heavy API users” who are themselves oauth’d who then pass along firehose feeds to others who aren’t, and the others who aren’t had the ability to retrieve https://i.redd.it/arbitrary.png.
The same issue applies to the scenario of “there’s a private subreddit with 100 people as authorised users, one user, UserA publishes a gallery in that private subreddit, another user wants to exfiltrate the contents of that gallery from the site while avoiding the lawful consequences of that act, that user copies the https://i.redd.it/arbitrary.png URLs and hands them over to an anonymous proxy hosted in Russia who then holds copies of the photos for 20 years while simultaneously resisting all law enforcement investigations into the matter of exactly who committed sexual assault of UserA by non-consensually publishing intimate media of UserA.”
Reddit has been improving how they handle authenticated access to user content in order to improve how they handle non-consensual intimate media. This is part of that process.
Comment by toaste at 18/04/2023 at 19:24 UTC
39 upvotes, 1 direct replies
This is all well and good.
But you can see elsewhere in this thread the Apollo app dev was singled out as a “heavy API user” as well, despite users of that app being directed to sign in with their own oauth.
There is an obvious financial incentive. Force 3P apps with large user bases onto a subscription model to drive people to the free-with-ads experience. I fully expect the pricing model to be escalating tiered and predatory.
And as an additional incentive,
“Oops, this community is not available on 3rd party clients. To view the full range of content available on Reddit, download our official app.”
Comment by Lonsdale1086 at 19/04/2023 at 13:03 UTC
4 upvotes, 1 direct replies
That's not a safety concern. That's a public image concern.