@crunklord420 @matrix > Meanwhile, it’s worth noting there are much worse things that server admins can do to abuse users than shadowbanning (e.g. steal their access_token and snoop on their account; tarpitting them; randomly dropping traffic), so I really don’t think this should be controversial.

https://github.com/matrix-org/synapse/pull/9209#issuecomment-772776294

Hmmm I’m not sure what to think about it 🤔

@Julia @matrix you should feel grateful Matthew isn't literally trying to murder you.

@Julia @crunklord420 @matrix Is it true that admins can steal access_token? Can you link to where they say how it's done?

@fluffy @Julia @matrix it's probably just in the DB

@crunklord420 @fluffy @matrix yeah probably. That's why you're supposed to check your devices and not trust your admin. Damages can be limited because he won't even have chat history on encrypted conversation.

But as Matthew said, there are already worst things that can be done 🤔