{"generator":"GNU social 2.0.2-dev","title":"Conversation","totalItems":3,"items":[{"actor":{"id":"https:\/\/mstdn.social\/users\/msw","displayName":"Matt \"msw\" Wilson","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/25406-original-tmp20221113054622.webp","rel":"avatar","type":"image\/webp","width":260,"height":260},{"url":"https:\/\/gnusocial.jp\/avatar\/25406-96-20221113054622.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/25406-48-20221113054622.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/25406-24-20221113054622.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"25406"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/25406-96-20221113054622.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Socio-technical Systems Engineer at #Amazon | Free and Open Source (#FOSS) Advocate | he\/him\/they\/them | Opinions: my own","url":"https:\/\/mstdn.social\/@msw","portablecontacts_net":{"preferredUsername":"msw","displayName":"Matt \"msw\" Wilson","note":"Socio-technical Systems Engineer at #Amazon | Free and Open Source (#FOSS) Advocate | he\/him\/they\/them | Opinions: my own"}},"content":"<p><a href=\"https:\/\/hachyderm.io\/@dalias\" class=\"u-url mention\">@dalias<\/a> <a href=\"https:\/\/social.treehouse.systems\/@ska\" class=\"u-url mention\">@ska<\/a> I think that the vendor of the appliance has good intentions, but there are intended consequences.<\/p><p>Unfortunately those unintended consequences can be long lasting, and encumber progress.<\/p><p>For some run-of-the-mill bugs where the most likely worst case is a crash (which can be detected), I question if we need to go to the trouble of issuing a special \"security bulletin\", rather than just keeping a detailed changelog \/ commit message.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-20:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mstdn.social\/users\/msw\/statuses\/116782942025844342","object":{"id":"https:\/\/mstdn.social\/users\/msw\/statuses\/116782942025844342","objectType":"note","content":"<p><a href=\"https:\/\/hachyderm.io\/@dalias\" class=\"u-url mention\">@dalias<\/a> <a href=\"https:\/\/social.treehouse.systems\/@ska\" class=\"u-url mention\">@ska<\/a> I think that the vendor of the appliance has good intentions, but there are intended consequences.<\/p><p>Unfortunately those unintended consequences can be long lasting, and encumber progress.<\/p><p>For some run-of-the-mill bugs where the most likely worst case is a crash (which can be detected), I question if we need to go to the trouble of issuing a special \"security bulletin\", rather than just keeping a detailed changelog \/ commit message.<\/p>","url":"https:\/\/gnusocial.jp\/notice\/12778941","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116782910605222324","url":"https:\/\/hachyderm.io\/@dalias\/116782910605222324"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/hachyderm.io\/users\/dalias"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-20:objectType=thread:nonce=ef39ddccd3505eda","notice_info":{"local_id":"12778941","source":"ActivityPub"}},"published":"2026-06-20T14:39:45+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/12778941"},{"actor":{"id":"https:\/\/hachyderm.io\/users\/dalias","displayName":"Rich Felker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/40873-original-tmp20221202140938.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-48-20221207231635.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-24-20221207231635.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"40873"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"C librarian, purveyor of the language&#39;s eldritch horrors. Poppin&#39; shells \ud83e\uddaa","url":"https:\/\/hachyderm.io\/@dalias","portablecontacts_net":{"preferredUsername":"dalias","displayName":"Rich Felker","note":"C librarian, purveyor of the language&#39;s eldritch horrors. Poppin&#39; shells \ud83e\uddaa"}},"content":"<p><a href=\"https:\/\/mstdn.social\/@msw\" class=\"u-url mention\">@msw<\/a> <a href=\"https:\/\/social.treehouse.systems\/@ska\" class=\"u-url mention\">@ska<\/a> If they were going to cut off a protocol feature like this, they needed to make it honor the protocol to fall back, if that's possible. Not break the protocol.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-20:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116782948794331292","object":{"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116782948794331292","objectType":"note","content":"<p><a href=\"https:\/\/mstdn.social\/@msw\" class=\"u-url mention\">@msw<\/a> <a href=\"https:\/\/social.treehouse.systems\/@ska\" class=\"u-url mention\">@ska<\/a> If they were going to cut off a protocol feature like this, they needed to make it honor the protocol to fall back, if that's possible. Not break the protocol.<\/p>","url":"https:\/\/hachyderm.io\/@dalias\/116782948794331292","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mstdn.social\/users\/msw\/statuses\/116782942025844342","url":"https:\/\/gnusocial.jp\/notice\/12778941"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mstdn.social\/users\/msw"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-20:objectType=thread:nonce=ef39ddccd3505eda","notice_info":{"local_id":"12778942","source":"ActivityPub"}},"published":"2026-06-20T14:39:44+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/hachyderm.io\/@dalias\/116782948794331292"},{"actor":{"id":"https:\/\/hachyderm.io\/users\/dalias","displayName":"Rich Felker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/40873-original-tmp20221202140938.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-48-20221207231635.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-24-20221207231635.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"40873"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"C librarian, purveyor of the language&#39;s eldritch horrors. Poppin&#39; shells \ud83e\uddaa","url":"https:\/\/hachyderm.io\/@dalias","portablecontacts_net":{"preferredUsername":"dalias","displayName":"Rich Felker","note":"C librarian, purveyor of the language&#39;s eldritch horrors. Poppin&#39; shells \ud83e\uddaa"}},"content":"<p><a href=\"https:\/\/social.treehouse.systems\/@ska\" class=\"u-url mention\">@ska<\/a> <a href=\"https:\/\/mstdn.social\/@msw\" class=\"u-url mention\">@msw<\/a> The problem wasn't the bug being fixed but a malicious security appliance breaking any use of the protocol feature the fixed bug was in, in order to \"protect\" outdated OpenSSL behind it.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-20:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116782910605222324","object":{"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116782910605222324","objectType":"note","content":"<p><a href=\"https:\/\/social.treehouse.systems\/@ska\" class=\"u-url mention\">@ska<\/a> <a href=\"https:\/\/mstdn.social\/@msw\" class=\"u-url mention\">@msw<\/a> The problem wasn't the bug being fixed but a malicious security appliance breaking any use of the protocol feature the fixed bug was in, in order to \"protect\" outdated OpenSSL behind it.<\/p>","url":"https:\/\/hachyderm.io\/@dalias\/116782910605222324","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mstdn.social\/users\/msw"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-20:objectType=thread:nonce=ef39ddccd3505eda","notice_info":{"local_id":"12778920","source":"ActivityPub"}},"published":"2026-06-20T14:30:01+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/hachyderm.io\/@dalias\/116782910605222324"}],"links":[{"url":"https:\/\/gnusocial.jp\/conversation\/6492087","rel":"alternate","type":"text\/html"}]}