Blocking not preventing users from interacting with posts

[Volmies]

Steps to Reproduce

I cannot provide steps to reproduce, as I have absolutely no idea how users are achieving this, however over the past few days I have noticed accounts being able to like posts despite the user who posted it having them blocked. It is likely the case that if they can interact with posts, such as liking, they can also see the posts and that completely defeats the purpose of being able to block users. I'm hopeful that this can be addressed quickly before it spreads, because if it spreads it could become very problematic very quickly.

See here and here, the user has the accounts "nofiltergpt.bsky.social‬" and "healingminds.bsky.social‬" blocked, and yet they were somehow able to like those posts.

Attachments

No response

What platform(s) does this occur on?

iOS, Android, Web (Desktop), Web (Mobile)

Device Info

Windows 11, Vivaldi (chrome based) v7.0.3495.20

What version of the app are you using?

Build version: 1.95.0; Bundle info: c9d86de (prod); Bundle date: 24112719; Platform: web; Platform version: undefined

Additional Information

No response

[Tamschi]

Looks like they're both spambotting. The restriction on seeing posts and submitting interactions is effectively clientside¹, so spambots aren't affected by them. That said, Bluesky should be filtering the published list of likes against blocks across that interaction for everyone just like how it's done with replies, in order to make them fruitless for spammers.

Relatedly, I noticed that disallowed interactions (for example replies that aren't permitted) still increase the displayed reply count.

Footnotes

1. It makes sense in context. Not ideal, but also not fully preventable with ATProto's approach, and still effective against most humans. ↩

[RaveningVaren]

I would like to back this statement up as I have noticed this event to have occurred a couple of times with posts receiving "phantom-likes" from accounts I can't see, but upon looking at it with alternate account it is being liked accounts that I have blocked and should not be able to see/interact with my posts.

[SpriterGors]

Chiming in to say that i too have seen "phantom likes" and "phantom replies" that can't be accessed because I blocked the users. I think it's misleading to have them be tallied because you can't see anything upon clicking.