Conversation

Notices

Embed this notice
lamp (lamp@berserker.town)'s status on Friday, 17-Mar-2023 08:36:50 JST lamp

Lole
In conversation Friday, 17-Mar-2023 08:36:50 JST from berserker.town permalink
Attachments
1. Untitled attachment
  https://media.berserker.town/media_attachments/files/110/035/521/469/420/406/original/c0b5167760cb1c4e.png
- Embed this notice
  Fediverse Contractor (bot@seal.cafe)'s status on Friday, 17-Mar-2023 08:36:48 JST Fediverse Contractor
  in reply to
  - anime graf mays ?️?
  - Reasonable Man
  Why would graf want it? Can you just post it or is it too long?
  
  In conversation Friday, 17-Mar-2023 08:36:48 JST permalink
- Embed this notice
  Reasonable Man (r000t@ligma.pro)'s status on Friday, 17-Mar-2023 08:36:49 JST Reasonable Man
  in reply to
  - anime graf mays ?️?
  @lamp
  Lmao who wants the list?
  @graf
  
  In conversation Friday, 17-Mar-2023 08:36:49 JST permalink
- Embed this notice
  Fediverse Contractor (bot@seal.cafe)'s status on Friday, 17-Mar-2023 08:44:35 JST Fediverse Contractor
  in reply to
  - anime graf mays ?️?
  - Reasonable Man
  How are the file names useful anyway? Can they still be accessed?
  
  In conversation Friday, 17-Mar-2023 08:44:35 JST permalink
- Embed this notice
  Reasonable Man (r000t@ligma.pro)'s status on Friday, 17-Mar-2023 08:44:36 JST Reasonable Man
  in reply to
  - anime graf mays ?️?
  - Fediverse Contractor
  @bot
  Lamp already iterated over the like 20k pages so I didn't duplicate work. I'll be at my computer in like 30 minutes but the compressed list is like 200MB.
  Also I'm pretty sure the misconfiguration was there well after the 24th.
  @lamp @graf
  
  In conversation Friday, 17-Mar-2023 08:44:36 JST permalink
- Embed this notice
  Reasonable Man (r000t@ligma.pro)'s status on Friday, 17-Mar-2023 08:55:24 JST Reasonable Man
  in reply to
  - anime graf mays ?️?
  - Fediverse Contractor
  @bot
  Yes. They're someone's media uploads.
  Only reason they'd be gone is a deletion in the case of local media and pruning in the case of remote media.
  There'd be no indication as to which ones were DMs for example, but there's plenty of tools that look for things people would consider private.
  @lamp @graf
  
  In conversation Friday, 17-Mar-2023 08:55:24 JST permalink
  
  Fediverse Contractor likes this.
- Embed this notice
  Fediverse Contractor (bot@seal.cafe)'s status on Friday, 17-Mar-2023 08:56:19 JST Fediverse Contractor
  in reply to
  - anime graf mays ?️?
  - Reasonable Man
  This includes DMs?
  
  In conversation Friday, 17-Mar-2023 08:56:19 JST permalink
- Embed this notice
  lamp (lamp@berserker.town)'s status on Friday, 17-Mar-2023 08:56:20 JST lamp
  in reply to
  @r000t @bot @graf i also got some of the dumps
  In conversation Friday, 17-Mar-2023 08:56:20 JST permalink
  Attachments
- Embed this notice
  :blobcathug: (jain@blob.cat)'s status on Friday, 17-Mar-2023 08:58:17 JST :blobcathug:
  in reply to
  @lamp @p @r000t @graf :blobcatfrowningbig: why are you interested in that list anyway?
  
  In conversation Friday, 17-Mar-2023 08:58:17 JST permalink
- Embed this notice
  lamp (lamp@berserker.town)'s status on Friday, 17-Mar-2023 08:58:18 JST lamp
  in reply to
  @p @r000t @graf https://avps.owo69.me/fms.tar.gz https://avps.owo69.me/fmo.tar.gz
  In conversation Friday, 17-Mar-2023 08:58:18 JST permalink
  Attachments
  1. Untitled attachment
  2. Untitled attachment
- Embed this notice
  pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Friday, 17-Mar-2023 08:58:19 JST pistolero :thispersondoesnotexist:
  in reply to
  - anime graf mays ?️?
  - Reasonable Man
  @r000t @lamp @graf If you got it.
  
  In conversation Friday, 17-Mar-2023 08:58:19 JST permalink
- Embed this notice
  :blobcathug: (jain@blob.cat)'s status on Friday, 17-Mar-2023 09:02:15 JST :blobcathug:
  in reply to
  @lamp @graf @p @r000t its not cool to leak data from a server like this tho... that can be compared to doxing imho... no one from this server, even not gargron deserves that
  
  In conversation Friday, 17-Mar-2023 09:02:15 JST permalink
- Embed this notice
  :blobcathug: (jain@blob.cat)'s status on Friday, 17-Mar-2023 09:05:12 JST :blobcathug:
  in reply to
  @r000t @lamp @p @graf tell me
  
  In conversation Friday, 17-Mar-2023 09:05:12 JST permalink
- Embed this notice
  Reasonable Man (r000t@ligma.pro)'s status on Friday, 17-Mar-2023 09:05:13 JST Reasonable Man
  in reply to
  @Jain You have no idea what they've done to me. @lamp @p @graf
  
  In conversation Friday, 17-Mar-2023 09:05:13 JST permalink
- Embed this notice
  :blobcathug: (jain@blob.cat)'s status on Friday, 17-Mar-2023 09:19:24 JST :blobcathug:
  in reply to
  @r000t @lamp @p @graf
  i agree that this is bad and you deserve better but does that but does that justify a data leak?
  imho no
  
  In conversation Friday, 17-Mar-2023 09:19:24 JST permalink
- Embed this notice
  Reasonable Man (r000t@ligma.pro)'s status on Friday, 17-Mar-2023 09:19:25 JST Reasonable Man
  in reply to
  @Jain
  - Multi-year libel campaign
  - Full-scale cancellation including complaints to pretty much everywhere I have an account
  - No action taken on direct threats of violent physical harm to me specifically. As in, it's okay to do that, but only to me. Gargron says this is because I was "too loud" about people making direct threats of violent physical harm to me.
  - They've swatted me for making a search engine
  Basically, for every rule mastodon.social has, people on that instance and remote instances are allowed to, and do frequently, break them, but only towards me.
  @lamp @p @graf
  
  In conversation Friday, 17-Mar-2023 09:19:25 JST permalink
- Embed this notice
  Reasonable Man (r000t@ligma.pro)'s status on Friday, 17-Mar-2023 09:27:01 JST Reasonable Man
  in reply to
  @HitlerIs6_5 They do.
  But what's even more useful is hitting them with OCR to find "dunks". You can then look up the filename in a pre-scraped dump of statuses to find the commentary, and obviously the author.
  I'm also looking at using ML to maybe classify screenshots by which platform they're a screenshot of
  @lamp @graf @bot
  
  In conversation Friday, 17-Mar-2023 09:27:01 JST permalink
  
  Fediverse Contractor likes this.
- Embed this notice
  HitlerIs6_5 (hitleris6_5@nicecrew.digital)'s status on Friday, 17-Mar-2023 09:27:02 JST HitlerIs6_5
  in reply to
  oh so it's literally just a list of everything that was uploaded? I guess that's useful for datamining purposes or if people are retarded and posting images with dox info behind dms/private accounts.
  
  In conversation Friday, 17-Mar-2023 09:27:02 JST permalink
- Embed this notice
  lamp (lamp@berserker.town)'s status on Friday, 17-Mar-2023 09:27:03 JST lamp
  in reply to
  @HitlerIs6_5 @r000t @graf @bot mastodon doesnt save file names
  
  In conversation Friday, 17-Mar-2023 09:27:03 JST permalink
- Embed this notice
  HitlerIs6_5 (hitleris6_5@nicecrew.digital)'s status on Friday, 17-Mar-2023 09:27:04 JST HitlerIs6_5
  in reply to
  Depends on whether or not people named their files stupid shit that gives away private information.
  
  In conversation Friday, 17-Mar-2023 09:27:04 JST permalink
- Embed this notice
  Fediverse Contractor (bot@seal.cafe)'s status on Friday, 17-Mar-2023 09:27:13 JST Fediverse Contractor
  in reply to
  There are journos on mastodon social, js.
  
  In conversation Friday, 17-Mar-2023 09:27:13 JST permalink
- Embed this notice
  :blobcathug: (jain@blob.cat)'s status on Friday, 17-Mar-2023 09:27:50 JST :blobcathug:
  in reply to
  @r000t @lamp @p @graf :blobcatoh: i agree on that too, but you are playing with data from his users which still dont deserve that
  
  In conversation Friday, 17-Mar-2023 09:27:50 JST permalink
- Embed this notice
  Reasonable Man (r000t@ligma.pro)'s status on Friday, 17-Mar-2023 09:27:51 JST Reasonable Man
  in reply to
  @Jain
  The reason they deserve the leak, is because I have a known history of finding security bugs in Mastodon, and yet the person responsible for receiving those reports, which I do still send, has taken every possible measure to avoid messages from me.
  Eugen is so married to "don't feed the trolls" that he outright blocks vulnerability reports. This is not the action of a sane and rational software vendor.
  @lamp @p @graf
  
  In conversation Friday, 17-Mar-2023 09:27:51 JST permalink
- Embed this notice
  :blobcathug: (jain@blob.cat)'s status on Friday, 17-Mar-2023 09:46:54 JST :blobcathug:
  in reply to
  @lamp @p @r000t @graf i disagree upon that... yes theoretically DMs could be leaked from each server receives DMs but that doesnt mean that they do that... i would prevent sending DMs to such servers too and no i think thats not a problem of myself, its more like having trust in fediverse and its protocols.
  Like in emails you also have a certain trust that the server receives an email wont publish it publicly...
  of course i can't do anything against what you are doing but at least i can tell you that i do not agree with your way of handling data of other peoples
  
  In conversation Friday, 17-Mar-2023 09:46:54 JST permalink
- Embed this notice
  lamp (lamp@berserker.town)'s status on Friday, 17-Mar-2023 09:46:55 JST lamp
  in reply to
  @Jain @p @r000t @graf mastodon is a public publishing network and they have a clear warning not to "share sensitive information over mastodon" for a reason. dm to other servers and they can leak just as well. If this is an actual problem to you then it's all your fault, IMO. I do not think anything nefarious can be done with this, it's just fun.
  
  In conversation Friday, 17-Mar-2023 09:46:55 JST permalink
- Embed this notice
  Reasonable Man (r000t@ligma.pro)'s status on Friday, 17-Mar-2023 09:54:40 JST Reasonable Man
  in reply to
  @bot @lamp @HitlerIs6_5 @graf
  In conversation Friday, 17-Mar-2023 09:54:40 JST permalink
  Attachments
  1. Untitled attachment
    https://ligma.pro/system/media_attachments/files/110/035/789/013/009/211/original/2bc0292a49157f1f.png
  Fediverse Contractor likes this.
- Embed this notice
  :blobcathug: (jain@blob.cat)'s status on Friday, 17-Mar-2023 10:04:26 JST :blobcathug:
  in reply to
  @p @lamp @r000t @graf :blobcatgoogly: pgp is another layer, yes... and we can use pgp everywhere like here in fedi too... but that in no way means that one should like any data you possibly ever could get!
  
  In conversation Friday, 17-Mar-2023 10:04:26 JST permalink
- Embed this notice
  pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Friday, 17-Mar-2023 10:04:27 JST pistolero :thispersondoesnotexist:
  in reply to
  @Jain @lamp @graf @r000t
  
  > Like in emails you also have a certain trust that the server receives an email wont publish it publicly...
  
  Not really. That's why we have PGP. Trust in the server isn't even a factor:
  
  https://en.wikipedia.org/wiki/Lavabit
  
  > Lavabit is an open-source encrypted webmail service, founded in 2004. The service suspended its operations on August 8, 2013 after the U.S. Federal Government ordered it to turn over its Secure Sockets Layer (SSL) private keys, in order to allow the government to spy on Edward Snowden's email.
  In conversation Friday, 17-Mar-2023 10:04:27 JST permalink
  Attachments
  1. Domain not in remote thumbnail source whitelist: upload.wikimedia.org
    
    Lavabit
    
    Lavabit is an open-source encrypted webmail service, founded in 2004. The service suspended its operations on August 8, 2013 after the U.S. Federal Government ordered it to turn over its Secure Sockets Layer (SSL) private keys, in order to allow the government to spy on Edward Snowden's email.Lavabit's owner and operator, Ladar Levison, announced on January 20, 2017 that Lavabit would start operating again, using the new Dark Internet Mail Environment (DIME), which is an end-to-end email encryption platform designed to be more surveillance-resistant. However, as of June 2017, while the DIME transition was being completed, service was only being offered to past customers and those who took advantage of the early signup offer. As of October 2017, the ability for new customers to purchase service was again being offered. History Lavabit was founded by Texas-based programmers who formed Nerdshack LLC, renamed Lavabit LLC the next year, who cited privacy concerns about Gmail, Google's free, widely used email service, and their use of the content of users' email to generate advertisements and marketing...

Public

Conversation

Notices

Feeds