at://bnewbold.net/app.bsky.feed.post/3mhvnzkjjbc2r

Back to Collection

Record JSON

{
  "$type": "app.bsky.feed.post",
  "createdAt": "2026-03-25T17:57:07.106Z",
  "langs": [
    "en"
  ],
  "text": "PDS hosters: folks should not have PDS_INVITE_REQUIRED=false in their config unless they know what they are doing.\n\nat a minimum you need CAPTCHAs on all signup routes, to block/disable the createAccount API flow, etc.\n\nwe know this should be smoother."
}