https://github.com/mastodon/mastodon/security/advisories/GHSA-288h-6j8h-6x5j It's been two weeks, and they still haven't published the details. What does "identifier verification" even mean?