Corn Woman 🌽 @WomanCorn@schelling.pt

writing malware that will infect a Kindle and replace all the books with ads for mexican beer. that's right, a novel corona virus

Let's talk about LastPass.

Earlier this year, I reported a cryptographic weakness to LastPass on BugCrowd.

(No, I'm not going to disclose what it is here.)

As you may know from my blog, reporting cryptographic issues in BugCrowd was a path fraught with peril. https://soatok.blog/2022/06/14/when-soatok-used-bugcrowd/

So, I'm finding out the hard way that if you start a new Mastodon server, nobody can find you.

This is a shameless request for some boosts so some of the bigger instances see me.

#mastodon #twittermigration #mastodonserver #findme #helpimtrappedinawell #imlonely

Also not that it matters but I am continuing to use "Mastodon" to describe the particular bit of the Fediverse visible from Mastodon Dot Social and "Fediverse" for the whole disconnected graph of federatable software. (Although tbh part of that is the word "Fediverse" rubs me the wrong way for some reason. Also considering how widely blocked it is, perhaps "Mastodon" shouldn't include Mastodon Dot Social.)

If you defederate Mastodon.social from your ActivityPub instance is that called a Mastectomy

take me down to parallax city where the back moves slow and the front moves quickly

Mastodon went back in time and completely rewrote their 2019 statement on Gab! What revisionist shits.

Now: https://blog.joinmastodon.org/2019/07/statement-on-gabs-fork-of-mastodon/

From 2019: https://web.archive.org/web/20190704090047/https://blog.joinmastodon.org/2019/07/statement-on-gabs-fork-of-mastodon/

Things we didn't do:
- Start the fire
- Shoot the deputy
- Steal the cookies from the cookie jar

Things we did:
- Tried to fight it
- Shot the sheriff
- Put the sham in the shama-lama-ding-dong

Things we will do:
- Survive
- Rock you
- Walk 500 miles
- Walk 500 more

Things we won't do:
- Get fooled again
- Back down
- That

Things we will never do:
- Give you up
- Let you down
- Run around
- Desert you

(Oops:
- I did it again)

However, many people are surprised to know the monster's name is not actually Mastodon. That's the name of its creator, Dr. John Mastodon.

This is Mastodon's Monster.

The #OnlineSafetyBill is still in play in the UK, and still contains deeply concerning aspects despite much revision, notably requiring age verification (which could amount to a need for ID cards to access the Internet) and a requirement for platforms to inspect content (which could ban effective encryption).

This is a decent summary: https://www.gp-digital.org/the-return-of-the-uks-online-safety-bill-whats-changed-and-whats-next/

@openrightsgroup are on the case too, although their singular focus on encryption may backfire. https://www.openrightsgroup.org/campaign/save-encryption/

#policy

> The PSP's web browser is - charitably - pathetic. It is slow, frequently runs out of memory, and can only open 3 tabs at a time... But the GOV.UK pages are written in simple HTML. They are designed to be lightweight and will work even on rubbish browsers. They have to. This is for everyone...
> Are you developing public services? Or a system that people might access when they're in desperate need of help? Plain HTML works. A small bit of simple CSS will make look decent. JavaScript is probably unnecessary - but can be used to progressively enhance stuff. Add alt text to images so people paying per MB can understand what the images are for (and, you know, accessibility).
> Go sit in an uncomfortable chair, in an uncomfortable location, and stare at an uncomfortably small screen with an uncomfortably outdated web browser. How easy is it to use the websites you've created?

The Unreasonable Effectiveness Of Simple HTML

https://shkspr.mobi/blog/2021/01/the-unreasonable-effectiveness-of-simple-html/
CC: @kelbot @alcinnz

You have a problem. You use regular expressions. You now have solved your problem with a tool used by thousands and thousands of engineers for decades.