Edit: This appears to have been fixed already with another backend update. Leaving the post below as-is.
Current version in the footer: UI: 0.19.0-rc.11
BE: 0.19.0-rc.10
Starting today, most image thumbnails and pictrs links will not load. I tried clearing cookies and I tried in three different browser engines (Firefox, Chromium, Safari).
If I try to open one of the image URLs directly in my browser, it shows {"error":"auth_cookie_insecure"}.
Interestingly, images will load correctly if I am NOT logged in. Why are the pictrs URLs even checking cookies when they do not require auth? Is that new behavior in this version of Lemmy?
Here is an example post: https://lemmy.sdf.org/post/8482278
And an example direct image URL from that post: https://lemmy.sdf.org/pictrs/image/c8556f4f-d33c-4cac-86f3-975726ea69ec.png
I am interested to know if others are seeing the same issue. I have not exhaustively tested different cookies settings in my browsers, so it's possible some anti-tracking privacy settings are interfering with this behavior.
Worth noting is that the Eternity app on my phone continues to work. I did not even need to log out and back in today, like I did in my browsers.
Good advice but let's be real: in practice, this means having no social media profile, and even that is a half-measure.
Even if I carefully curate my friends list (most people don't), and share my photos with only my inner circle (most people won't), I have no control over what my friends do. If my cousin posts a photo he took at Thanksgiving, it's probably going to be visible to all his friends, and even friends-of-friends. That's thousands of people I've never met and there's not much I can do about it.
There are pictures of me on Facebook, and I do not use Facebook. The social cost of getting on everyone's ass about taking/posting pictures with me is too high even for a grumpy old fart like me. At least I'm not tagged (since I don't have a profile), so it's not neatly pre-sorted for potential attackers. But that's at best security through obscurity, and it isn't even very obscure. Anyone targeting me specifically would have no trouble finding pictures of me, and none of that is realistically within my control.
It's more like "beater bike security". Any bike lock can be thwarted by a dedicated thief, so the best strategy is simply to be a less attractive target than the other bikes around.
This is a systemic problem. It goes beyond individual choices and even beyond social media policies.