Untitled attachment

Notices where this attachment appears

1. Embed this notice
   silverpill (silverpill@mitra.social)'s status on Tuesday, 23-Dec-2025 05:24:50 JST silverpill

   Blockchain is a bad choice for a social network, it's expensive and all data is public. But since we're talking about decentralization, let's make a rough comparison.

   Bitcoin: 24229 nodes (source: https://bitnodes.io)
   Fediverse: 30005 nodes (source: https://fedilist.com)

   Most of blockchain networks are much smaller than Bitcoin, so they don't even come close to the Fediverse in terms of decentralization.

2. Embed this notice
   pistolero (p@fsebugoutzone.org)'s status on Tuesday, 04-Nov-2025 23:09:40 JST pistolero
   :msf::bigbosspw::hacker_f::hacker_s::hacker_e::kazpw::msf:
   
   FSE WILL GO DOWN FOR A COUPLE OF DAYS
   
   :mycomputer::ocelot: Outer Heaven :oldsnake::hal9000:
   
   The physical machines are being moved to a different location. I am being transported to a secure location by @w0rm . I swear it is not a CIA black site; you have no reason to believe me when I say that.
   
   This will happen Wednesday night, in the wee hours after the day rolls over and becomes Thursday. There will be some travel time and also some time required to set everything back up. Some of the logistics are going to be solved on-site. Transport time will be at least a day, and then, in all likelihood, it will require most of the next day before FSE is back up. It might take longer, it might take less time, but at least 36 hours of downtime. I will be doing the physical move myself (because I am paranoid and I do not trust anyone else to take care of my machines) and will retain physical custody of the machines throughout. During the downtime, I will be posting from @p with @p as secondary backup. I will be using FediBBS (which I am currently using for this post) for the most part, because this enables me to not use a browser. (I might hack on it at a gas station if I want to do something and FediBBS doesn't do it.) I'll reply with the source tarball hosted on not-FSE (because it is anyone's guess whether it will be fetchable during the downtime and also because the "interject" feature is hilarious).
   
   If you do not have an alt and you wanna be able to continue to talk to people on fedi, you should get an alt, and put the alt in the bio so people can look at your FSE account and determine that you're you. There's poa.st, there's annihilation.social, there's ryona.agency, there are a lot of instances. There's an export option in the settings that will let you download the list of people you are following, and other servers will let you upload it.
   
   Because of the fuzzy timeline, you can use https://fedilist.com/instance/recent-changes?host=fsebugoutzone.org to see when FSE is back up. If you want to have something automatic happen, you can use https://fedilist.com/instance/recent-changes/rss?host=fsebugoutzone.org . If you have your alt follow either me or @warrantcanary (which I'll trigger as soon as FSE is up again unless there is something that occurs that makes me no longer want to trigger it, in which case you *should* start to worry), then that will probably be faster than FediList, because FSE will be in FediList's "lazarus" queue, which is the slow queue for instances that have been down a little while.
   
   A lot of the media on media.fse will still be up, but a lot of it will be busted. git.fse will be down, blog.fse will be down, etc. Most of the shit I do will be down, because everything is in this cabinet because I'm goddamn paranoid. fedilist.com will still be up but the queue will be jammed somewhat; I think that's literally the only site I have that will still be up. (Though some deployment quirks will result in me having to fiddle with some stuff today so that I can ensure that it stays up, because it's using media.fse for its bulk storage. I'm not sure if I wanna try to move media.fse or if I wanna just have the FediList crawlers point at a different host; in either case, I'd been planning to move media.fse so maybe I should just do that. But the idea is that fedilist.com should still be up.)
   
   Also the FediList hosting, I should point out, is very generously provided by @graf through CrunchBits because he loves the fediverse. Poast accepts donations: https://poa.st/donate/crypto . If you've got some spare BTC, I am currently whoring: 1BZz3ndJUoWhEvm1BfW3FzceAjFqKTwqWV .
3. Embed this notice
   pistolero (p@fsebugoutzone.org)'s status on Wednesday, 25-Jun-2025 08:51:39 JST pistolero

   in reply to
   @sevvie Yeah; CVE for esshd in this version of Elixir. Unfortunate. I *think* that it isn't exploitable the way it's used in Pleroma, but I haven't looked into it closely enough to determine this conclusively.
   
   The report for the bug says that it allows unauthenticated users to execute commands as the user running esshd. I expect that this means it starts the event processing loop before successfully completing auth, which, when used like a regular sshd, means that it would be the same as getting a shell as the user, but that doesn't really make much sense because that would imply it's starting a shell as the user running the daemon and then a shell as a different user. So I have no idea what the mechanics are and haven't looked. (If you see a sploit floating around, that would probably be the easiest way to check. :zerocool:)
   
   I have, I think, a better solution for this, but it's down the list; if 90% of my hacking is done on Revolver, then 9% on fedilist.com, then 0.9% on this thing. (I have a little reading to do to make it GA-useful but some of the skeleton is in place. When most of the skeleton is in place, I'll dump it on the world in a public repo.) I am partially out sick the last couple of days and probably today and it's not a hard thing to do so maybe I will work on that instead of anything that requires much brain juice.
4. Embed this notice
   pistolero (p@fsebugoutzone.org)'s status on Thursday, 12-Jun-2025 14:27:57 JST pistolero

   in reply to
   @lanodan Ha, nice. Yeah, the residential proxies started when I blocked most of Tencent Cloud. I have no idea why they'd want to scrape fedilist.com *that* badly. It's really fuckin' weird.
5. Embed this notice
   Zergling_man (zergling_man@sacred.harpy.faith)'s status on Thursday, 29-May-2025 18:25:52 JST Zergling_man

   in reply to
   @colonelj @NonPlayableClown @ARD0xjNVGoRHiFChQu.graf@poa.st ... The one that runs on fedilist.com...?
6. Embed this notice
   pistolero (p@fsebugoutzone.org)'s status on Monday, 24-Mar-2025 06:39:35 JST pistolero

   in reply to
   @r000t @graf
   
   > I don't remember if Poast was around for this,
   
   The mentality expiration event was Summer 2019; Poast arrived January 2021.
   
   > The response? DNS providers are coming next,
   
   They don't know how any of it works; this was probably a face-saving maneuver because 90% of the fediblock people don't know what DNS is. People have added fedilist.com to their blocklists, despite this having no effect.
   husky--hitler_tusky.jpg