https://twitter.com/i/lists/1123962325353095168
I have purged my Weird Sun Twitter list.
(Removing Suns that don't post and people who have rebranded.)
If you know of any live Suns that aren't on this list, please let me know.
@soatok did you ever get any useful eyes on it? Did you dump the disclosure publicly? (And if so, did they whine that you didn't use proper channels?)
Let's talk about LastPass.
Earlier this year, I reported a cryptographic weakness to LastPass on BugCrowd.
(No, I'm not going to disclose what it is here.)
As you may know from my blog, reporting cryptographic issues in BugCrowd was a path fraught with peril. https://soatok.blog/2022/06/14/when-soatok-used-bugcrowd/
So, I'm finding out the hard way that if you start a new Mastodon server, nobody can find you.
This is a shameless request for some boosts so some of the bigger instances see me.
#mastodon #twittermigration #mastodonserver #findme #helpimtrappedinawell #imlonely
Also not that it matters but I am continuing to use "Mastodon" to describe the particular bit of the Fediverse visible from Mastodon Dot Social and "Fediverse" for the whole disconnected graph of federatable software. (Although tbh part of that is the word "Fediverse" rubs me the wrong way for some reason. Also considering how widely blocked it is, perhaps "Mastodon" shouldn't include Mastodon Dot Social.)
If you defederate Mastodon.social from your ActivityPub instance is that called a Mastectomy
@SJohnRoss if I knew how to reliably recreate this, I'd be selling it!
Some combination of meditation, antidepressants, aging and lifestyle change.
Mastodon went back in time and completely rewrote their 2019 statement on Gab! What revisionist shits.
Now: https://blog.joinmastodon.org/2019/07/statement-on-gabs-fork-of-mastodon/
Things we didn't do:
- Start the fire
- Shoot the deputy
- Steal the cookies from the cookie jar
Things we did:
- Tried to fight it
- Shot the sheriff
- Put the sham in the shama-lama-ding-dong
Things we will do:
- Survive
- Rock you
- Walk 500 miles
- Walk 500 more
Things we won't do:
- Get fooled again
- Back down
- That
Things we will never do:
- Give you up
- Let you down
- Run around
- Desert you
(Oops:
- I did it again)
The #OnlineSafetyBill is still in play in the UK, and still contains deeply concerning aspects despite much revision, notably requiring age verification (which could amount to a need for ID cards to access the Internet) and a requirement for platforms to inspect content (which could ban effective encryption).
This is a decent summary: https://www.gp-digital.org/the-return-of-the-uks-online-safety-bill-whats-changed-and-whats-next/
@openrightsgroup are on the case too, although their singular focus on encryption may backfire. https://www.openrightsgroup.org/campaign/save-encryption/
> The PSP's web browser is - charitably - pathetic. It is slow, frequently runs out of memory, and can only open 3 tabs at a time... But the GOV.UK pages are written in simple HTML. They are designed to be lightweight and will work even on rubbish browsers. They have to. This is for everyone...
> Are you developing public services? Or a system that people might access when they're in desperate need of help? Plain HTML works. A small bit of simple CSS will make look decent. JavaScript is probably unnecessary - but can be used to progressively enhance stuff. Add alt text to images so people paying per MB can understand what the images are for (and, you know, accessibility).
> Go sit in an uncomfortable chair, in an uncomfortable location, and stare at an uncomfortably small screen with an uncomfortably outdated web browser. How easy is it to use the websites you've created?
The Unreasonable Effectiveness Of Simple HTML
https://shkspr.mobi/blog/2021/01/the-unreasonable-effectiveness-of-simple-html/
CC: @kelbot @alcinnz