There might be a Ruby exploit that needs fixing ._.
We already fixed that approximately 3 hours after the CVE and patch was released. That’s why they call them critical bugs!
They’re actually working on tag implications, so expect that sometime.
Indeed, and we’re hoping to roll these out before too long.
I would like to be able to remove notifications without actually visiting the page and/or thread in question without actually unsubscribing from them.
A "mark all read" button is in the works – does that fulfil your needs?
We need a thread for discussing MLP topics that aren’t specifically episodes.
Also, Ponibooru let users set preferences without logging in. Why doesn’t Derpibooru have that?
The forum isn’t a bad idea, neither are the other suggestions in this topic – we’re certainly not opposed to reorganizing a bit and that probably wants its own thread for discussion.
We have a login requirement because keeping track of all those settings (and we have many, many more than Ponibooru, it’s worth noting) is hard – specifically it doesn’t efficiently fit into a cookie, and for larger tag sets (which people do have – some people have hundreds of tags in their watch or filter lists) it would actually overflow the cookie and break things. Hence the login requirement, which isn’t arduous.
Keep it coming, everyone!