Post

i know. it's the #1 thing yall have been asking for. it's a Bluesky meme. every time we post something, people reply "edit posts wen?" we see you. we have always seen you. so why haven't we shipped it?

there are various safety and spam risks, but the core problem is this: someone writes "puppies are the best 🐶", racks up engagement, then edits it to say something horrible or swaps in a link to a malicious site. now people look like they endorsed it.

this gets especially ugly with reposts and quote posts. plus, post editing adds more complexity and required tooling for our T&S team. so if we do this, we'll need guardrails.

here's what we're thinking: 1) you have 5 minutes to edit a post 2) you can only edit each posts once 3) images and videos can’t be edited 4) a prominent "edited" badge appears on the post 5) version history is visible to everyone 6) your account has to be at least a week old

This is really, really not enough to guard against serious abuse issues. At the bare minimum, you also have to clear interactions or include versioning, and even that's not enough. I'm begging you, email me, I will redteam this for you, there are SO MANY invisible abuse cases

Ah, you're correct, my eyes slid over that because I just woke up -- my bad! Okay, correct that to "attach the interaction to the version", which is what *I* mean when I say versioning but want to make sure it's part of what they mean

I mean the great thing about that is that bluesky has the technical ability to do it already. They can, at the very LEAST, provably attest as to whether a user stated that their intent was to respond to an old version of the post.

(note I have phrased this very carefully: a user can always doctor their post to make it look like they were interacting with a prior version of the content even after the edited version is up and all Bluesky can do is say "well, the edited version EXISTED at the time this post was seen by us")