haverholm

joined 4 months ago
[–] haverholm@kbin.earth 2 points 7 hours ago

Wtf, how have I not heard that writefreely hasn't federated since Xmas?

[–] haverholm@kbin.earth 7 points 1 day ago

Nope. The actual ~~purpose~~ functionality seems unclear to me.

Edited.

[–] haverholm@kbin.earth 10 points 2 days ago

This exactly. With a federated app store, how would users verify that apps hadn't been tampered with? Federation isn't a one size fits all solution.

And yes, "a future Fediverse OS" isn't a potential, it's a hallucination.

[–] haverholm@kbin.earth 5 points 2 days ago

Blocked or Deleted Users cannot send you private messages anymore

Thanks devs! Sorry Nicole!

[–] haverholm@kbin.earth 1 points 4 days ago

Plume isn't currently actively maintained, unfortunately. It's right below the fold of the page you linked 😞

As for customisability, I think writefreely has some different themes to choose from, they're just hidden away in the docs or on github.

[–] haverholm@kbin.earth 6 points 4 days ago (2 children)

So, I was probably (one of) the first to post that “Pixelfed leaks private posts” thing on here? I first wrote a long reply to this, but it sort if got away from me. The short version would be,

A) sure, the fediverse has a bullying problem in the sense that people do, and that that is usually exacerbated in any online comment field. People are awful, and that includes me, you, Dansup, and anybody reading this. We're also usually pretty brilliant when nobody's looking.

B) despite what I write above, I don't take bullying lightly. I am really uncomfortable with how you use the generally phrased headline to address this specific case. You're not writing about the fediverse as such, you're casting Dansup as a victim.

C) Dan's up, Dan's down, Dan's a victim, Dan's throwing a fit online and then deleting the tweets. As you cite in OP, some people attribute all sorts of unrelated evil to him. Most of all, my impression is Dansup has as a hard time separating from his role as main developer on Pixelfed, Loops, etc, as online commenters has separating his work from (perceived) personal faults.

D) let's imagine those projects were fully open sourced and developed by the community already. Would we be in the same situation here? Again, resorting to ad hominem bullying in online discussion is unacceptable, but I do question that Dansup is an unequivocable victim. Nor is he an evil mastermind who has engineered this situation to garner pity. He just seems to be extremely hard working, with a generous pinch of need for control of his projects.

[–] haverholm@kbin.earth 5 points 5 days ago

I've seen Japanese artist deleted their account because they mistaken a joke towards their art as hate comment.

Yikes! I wanted to comment that it would be clear that you're using a translation service of some kind if you reply in a different language from the post, and the other part might take that into consideration — but clearly that isn't a given.

[–] haverholm@kbin.earth 3 points 5 days ago (1 children)

Not with crypto you're not, "bruh". We have seen not once, not twice, but in a rolling news cycle since 2021 that cryptocurrencies are a scam. When somebody shows you who they are ... well, we're way past the first time here.

Along with the inherent speculation incentive required for a new crypto token to take off, there is the real world consequence of power hungry data centres with an outsized carbon emissiin footprint. Yes, there were developments to cut back the power usage, but I leave you to look up the rebound effect.

I'll give you the benefit of doubt here and assume your intentions are the best, but by 2025 any attempt at improving economic systems with blockchain seems quite misguided.

[–] haverholm@kbin.earth 4 points 5 days ago (3 children)

Hey, people aren't buying the "get rich quick" hype anymore, let's roll back cryptocurrency onboarding to the idealistic, antiauthoritarian hype and catch us some new suckers.

Or — radical idea here, I know — stop playing with digital Monopoly money and fight capitalism.

[–] haverholm@kbin.earth 7 points 1 week ago

Whut. I mean, probably, but not in this thread?

[–] haverholm@kbin.earth 4 points 1 week ago

Ah, good catch. Thanks!

[–] haverholm@kbin.earth 2 points 1 week ago (3 children)

Edited to add: I got this around the wrong foot, see the reply to this. /edit

Not necessarily, as clearly stated in the linked article:

But sure enough, the toot was followers only and the person that had liked it was not following her Mastodon account. When I took a look at the other persons profile on pixelfed.social, I noticed that the instance was nevertheless claiming the account was following her.

When pixelfed assumes that an account is not locked, it immediately treats a follow attempt as completed. For the server on the other end it looks like a normal follow request. It could be rejected, and pixelfed would still be convinced that a follow relation exists.

 

Found this via Aurynn Shaw:

When following someone on a different server on the Fediverse, the remote server decides whether you are allowed to do so. This enables features like private accounts. Due to an implementation mistake, Pixelfed ignores this and allows anyone to follow even private accounts on other servers. When a legitimate user from a Pixelfed instance follows you on your locked fediverse account, anyone on that Pixelfed instance can read your private posts. You don’t need to be a Pixelfed user to be affected.

Pixelfed admins should update to v1.12.5 ASAP, but upgrading can be a major hurdle.

Importantly, your Mastodon or GoToSocial instance isn’t handing your private posts to any random server, just because it asks. The problem only becomes apparent when you have at least one legit accepted follower from a Pixelfed server. Now that server is allowed to fetch all your private posts. And when it knows the posts, it has to decide who to show them. When you accept a follower, you not only place your trust to keep a secret on them, but also on their admin and the software they are running.

Edited to add the last block quote.

 

✅ LineageOS
❎ Google Apps
✅ F-droid
✅ Antennapod
✅ Voice
✅ Fossify apps
✅ Kvaesitso launcher

I'm not gonna lie, this "dumb phone" is awkwardly close to how my daily driver has looked for the better part of a decade.

view more: next ›