Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 01:49:08 JST Gaijin

Does anyone running a misskey/mastodon instance know if it would be possible for you to steal someone's profile? May it be by simply deleting and recreating the same username on the same instance but with you in control, or by other means?

I'm asking because I think we could all benefit from a private/public keys system like there is on keybase.io in order to be sure that we are interacting with the right user.
In conversation about 6 months ago from den.raccoon.quest permalink
Attachments
1. Domain not in remote thumbnail source whitelist: keybase.io
  
  Keybase
  
  Keybase is for keeping everyone's chats and files safe, from families to communities to companies. MacOS, Windows, Linux, iPhone, and Android.
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 01:49:03 JST Sick Sun
  in reply to
  - Dushman
  @dushman @gaijin authorized fetch key in practice is per-server not per-individual.
  
  key management for individuals is a hard problem
  
  In conversation about 6 months ago permalink
  
  clacke@libranet.de is my main likes this.
- Embed this notice
  Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 01:49:06 JST Dushman
  in reply to
  
  @gaijin May it be by simply deleting and recreating the same username on the same instance but with you in controlWhen you delete an account the name will still be reserved unless an admin changes this manually, so no. I assume Mastodon does the same thing, though I never ran it myself. I'm asking because I think we could all benefit from a private/public keys system like there is on keybase.io in order to be sure that we are interacting with the right user.A similar feature already exists, it's called authorized fetch. Most fedivsrse software implements it.
  https://www.w3.org/wiki/ActivityPub/Primer/Authentication_Authorization
  In conversation about 6 months ago permalink
  Attachments
  1. Domain not in remote thumbnail source whitelist: keybase.io
    
    Keybase
    
    Keybase is for keeping everyone's chats and files safe, from families to communities to companies. MacOS, Windows, Linux, iPhone, and Android.
  2. No result found on File_thumbnail lookup.
    
    ActivityPub/Primer/Authentication Authorization - W3C Wiki
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 01:49:48 JST Sick Sun
  in reply to
  - Dushman
  @dushman @gaijin the funny part is that every user does have a public and private rsa key on the server itself with mastodon/pleroma lol
  
  In conversation about 6 months ago permalink
  
  clacke@libranet.de is my main likes this.
- Embed this notice
  Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 01:49:50 JST Dushman
  in reply to
  - Sick Sun
  @sun@shitposter.world @gaijin@den.raccoon.quest
  Yeah I should've clarified. Implementing this per user would be a massive headache.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 01:57:39 JST Sick Sun
  in reply to
  - Dushman
  @gaijin @dushman work is being done to make it possible for a user to have custody of their own private key but this work will go nowhere because mastodon will refuse to support it.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 01:57:40 JST Gaijin
  in reply to
  - Dushman
  - Sick Sun
  @sun@shitposter.world @dushman@den.raccoon.quest Why aren't we letting users see the public key of others in order to compare? And the owner download his private key to keep it on a safe storage?
  
  In conversation about 6 months ago permalink
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:02:11 JST Sick Sun
  in reply to
  - Dushman
  - Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧
  @jeffcliff @dushman @gaijin I'm sorry, I keep forgetting that Mastodon is only the distant second-most adopted activitypub implementation.
  
  In conversation about 6 months ago permalink
  
  Doughnut Lollipop 【記録係】:blobfoxgooglymlem: likes this.
- Embed this notice
  Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧 (jeffcliff@shitposter.world)'s status on Thursday, 16-May-2024 02:02:12 JST Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧
  in reply to
  - Dushman
  - Sick Sun
  @sun @gaijin @dushman
  
  > because threads will refuse to support it
  
  ftfy
  
  In conversation about 6 months ago permalink
- Embed this notice
  Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:03:12 JST Dushman
  in reply to
  - Sick Sun
  - Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧
  @sun@shitposter.world @jeffcliff@shitposter.world @gaijin@den.raccoon.quest
  It's joever
  
  In conversation about 6 months ago permalink
  
  Sick Sun likes this.
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:09:52 JST Sick Sun
  in reply to
  - Dushman
  @gaijin @dushman there is some hesitancy here because if you mention crypto wallets (now probably the biggest end-user deployment of public key encryption ever), even though you're not even touching a blockchain or expending carbon to do the key operations, a bunch of people start pissing and shitting themselves uncontrollably with rage at the suggestion.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:09:54 JST Gaijin
  in reply to
  - Dushman
  - Sick Sun
  @dushman @sun@shitposter.world Could be done by a browser extension like crypto wallets do. Then you could connect to fedi with your private key somehow. I'm not well informed on how it works to be honest.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:09:56 JST Dushman
  in reply to
  - Sick Sun
  @gaijin @sun@shitposter.world
  Well I'm talking about having the authentication be done by the client. Would be too cumbersome for something like fedi.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:09:59 JST Gaijin
  in reply to
  - Dushman
  - Sick Sun
  @dushman @sun@shitposter.world Wuw, that's probably too technical for me. But I'll give it a try. thx
  
  In conversation about 6 months ago permalink
- Embed this notice
  Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:10:02 JST Dushman
  in reply to
  - Sick Sun
  @gaijin @sun@shitposter.world
  Yeah that's the problematic part. Look at XMPP omemo encryption if you wanna know what issues that would cause lol.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:22:38 JST Sick Sun
  in reply to
  - Dushman
  @gaijin @dushman I'm familiar (I work in the industry) but the reaction is almost completely emotional not factual.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:22:39 JST Gaijin
  in reply to
  - Dushman
  - Sick Sun
  @dushman @sun@shitposter.world Depends on the blockchain and the confirmation system they are using. PoW (Proof of Work) is indeed insane but alternatives are being found like the Solana one with their PoH (Proof of History)
  
  https://pbs.twimg.com/media/FuPlY7dWYAEQvm_?format=jpg&name=large
  In conversation about 6 months ago permalink
  Attachments
  1. Untitled attachment
    https://pbs.twimg.com/media/FuPlY7dWYAEQvm_?format=jpg&name=large
- Embed this notice
  Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:22:42 JST Dushman
  in reply to
  - Sick Sun
  @sun@shitposter.world @gaijin@den.raccoon.quest
  Someone was pissed at that specifically? The actual transactions are very energy intensive which is a valid point.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:25:27 JST Sick Sun
  in reply to
  - Dushman
  @dushman @gaijin I did say that the key operations don't do transactions, they are just normal cryptography on the client machine alone.
  
  eth wallets are what are usually on the table and they switched to a system a couple of years ago that doesn't boil oceans so everybody just switched their argument to "it's still bad because it USED TO do that"
  
  In conversation about 6 months ago permalink
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:31:37 JST Sick Sun
  in reply to
  - Dushman
  @dushman @gaijin most people here are extremely anti-crypto no matter what. I'm not talking about you, who has some concerns/objections, but people that have a giant emotional reaction to the idea of using a crypto wallet for any purpose.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:31:39 JST Dushman
  in reply to
  - Sick Sun
  @sun@shitposter.world @gaijin@den.raccoon.quest I did say that the key operations don't do transactions, they are just normal cryptography on the client machine alone.I know. I was asking if someone made a fuss about that for some reason.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:53:27 JST Sick Sun
  in reply to
  - Dushman
  @dushman @gaijin that is fair but at the same time consider that all of this applies to anyone in normal finance and these same people still beg using paypal
  
  In conversation about 6 months ago permalink
- Embed this notice
  Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:53:29 JST Dushman
  in reply to
  - Sick Sun
  @sun@shitposter.world @gaijin@den.raccoon.quest
  Yeah I guess a lot of them are here. Overly enthusiastic cryptobros are just as cringe though. Also energy usage aside, seeing more use as a vehicle for speculation than actual currency is another big problem imo.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:55:41 JST Sick Sun
  in reply to
  - Dushman
  - ロミンちゃん
  @gaijin @dushman @romin I declare this is now a crypto thread.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:55:44 JST Gaijin
  in reply to
  @romin@shitposter.world @sun@shitposter.world @dushman@den.raccoon.quest No, there are a lot of scams in crypto. Nuance.
  
  In conversation about 6 months ago permalink
- Embed this notice
  ロミンちゃん (romin@shitposter.world)'s status on Thursday, 16-May-2024 02:55:45 JST ロミンちゃん
  in reply to
  - Dushman
  - Sick Sun
  @sun @dushman @gaijin but crypto is a scam (a very profitable one)
  
  In conversation about 6 months ago permalink
- Embed this notice
  Sick Sun (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:57:18 JST Sick Sun
  in reply to
  - Dushman
  @dushman @gaijin I separate you from the lunatics I'm talking about, friend.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:57:21 JST Dushman
  in reply to
  - Sick Sun
  @sun@shitposter.world @gaijin@den.raccoon.quest
  Well I'm not too fond of traditional finance or capitalism in the first place. I do consider that.
  
  In conversation about 6 months ago permalink
- Embed this notice
  Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:58:29 JST Dushman
  in reply to
  - Sick Sun
  @sun@shitposter.world @gaijin@den.raccoon.quest
  Oh yeah I'm not implying you aren't. Just saying what I think about this.
  
  In conversation about 6 months ago permalink
  
  Sick Sun likes this.

Feeds