GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Conversation

Notices

  1. Embed this notice
    Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 01:49:08 JST Gaijin Gaijin

    Does anyone running a misskey/mastodon instance know if it would be possible for you to steal someone's profile? May it be by simply deleting and recreating the same username on the same instance but with you in control, or by other means?

    I'm asking because I think we could all benefit from a private/public keys system like there is on keybase.io in order to be sure that we are interacting with the right user.

    In conversation about a year ago from den.raccoon.quest permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: keybase.io
      Keybase
      Keybase is for keeping everyone's chats and files safe, from families to communities to companies. MacOS, Windows, Linux, iPhone, and Android.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 01:49:03 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      @dushman @gaijin authorized fetch key in practice is per-server not per-individual.

      key management for individuals is a hard problem
      In conversation about a year ago permalink
      clacke@libranet.de is my main likes this.
    • Embed this notice
      Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 01:49:06 JST Dushman Dushman
      in reply to

      @gaijin May it be by simply deleting and recreating the same username on the same instance but with you in controlWhen you delete an account the name will still be reserved unless an admin changes this manually, so no. I assume Mastodon does the same thing, though I never ran it myself. I'm asking because I think we could all benefit from a private/public keys system like there is on keybase.io in order to be sure that we are interacting with the right user.A similar feature already exists, it's called authorized fetch. Most fedivsrse software implements it.
      https://www.w3.org/wiki/ActivityPub/Primer/Authentication_Authorization

      In conversation about a year ago permalink

      Attachments

      1. Domain not in remote thumbnail source whitelist: keybase.io
        Keybase
        Keybase is for keeping everyone's chats and files safe, from families to communities to companies. MacOS, Windows, Linux, iPhone, and Android.
      2. No result found on File_thumbnail lookup.
        ActivityPub/Primer/Authentication Authorization - W3C Wiki
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 01:49:48 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      @dushman @gaijin the funny part is that every user does have a public and private rsa key on the server itself with mastodon/pleroma lol
      In conversation about a year ago permalink
      clacke@libranet.de is my main likes this.
    • Embed this notice
      Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 01:49:50 JST Dushman Dushman
      in reply to
      • Fish of Rage

      @sun@shitposter.world @gaijin@den.raccoon.quest
      Yeah I should've clarified. Implementing this per user would be a massive headache.

      In conversation about a year ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 01:57:39 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      @gaijin @dushman work is being done to make it possible for a user to have custody of their own private key but this work will go nowhere because mastodon will refuse to support it.
      In conversation about a year ago permalink
    • Embed this notice
      Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 01:57:40 JST Gaijin Gaijin
      in reply to
      • Dushman
      • Fish of Rage

      @sun@shitposter.world @dushman@den.raccoon.quest Why aren't we letting users see the public key of others in order to compare? And the owner download his private key to keep it on a safe storage?

      In conversation about a year ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:02:11 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      • Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧
      @jeffcliff @dushman @gaijin I'm sorry, I keep forgetting that Mastodon is only the distant second-most adopted activitypub implementation.
      In conversation about a year ago permalink
      Doughnut Lollipop 【記録係】:blobfoxgooglymlem: likes this.
    • Embed this notice
      Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧 (jeffcliff@shitposter.world)'s status on Thursday, 16-May-2024 02:02:12 JST Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧 Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧
      in reply to
      • Dushman
      • Fish of Rage
      @sun @gaijin @dushman

      > because threads will refuse to support it

      ftfy
      In conversation about a year ago permalink
    • Embed this notice
      Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:03:12 JST Dushman Dushman
      in reply to
      • Fish of Rage
      • Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧

      @sun@shitposter.world @jeffcliff@shitposter.world @gaijin@den.raccoon.quest
      It's joever

      In conversation about a year ago permalink
      Fish of Rage likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:09:52 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      @gaijin @dushman there is some hesitancy here because if you mention crypto wallets (now probably the biggest end-user deployment of public key encryption ever), even though you're not even touching a blockchain or expending carbon to do the key operations, a bunch of people start pissing and shitting themselves uncontrollably with rage at the suggestion.
      In conversation about a year ago permalink
    • Embed this notice
      Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:09:54 JST Gaijin Gaijin
      in reply to
      • Dushman
      • Fish of Rage

      @dushman @sun@shitposter.world Could be done by a browser extension like crypto wallets do. Then you could connect to fedi with your private key somehow. I'm not well informed on how it works to be honest.

      In conversation about a year ago permalink
    • Embed this notice
      Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:09:56 JST Dushman Dushman
      in reply to
      • Fish of Rage

      @gaijin @sun@shitposter.world
      Well I'm talking about having the authentication be done by the client. Would be too cumbersome for something like fedi.

      In conversation about a year ago permalink
    • Embed this notice
      Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:09:59 JST Gaijin Gaijin
      in reply to
      • Dushman
      • Fish of Rage

      @dushman @sun@shitposter.world Wuw, that's probably too technical for me. But I'll give it a try. thx

      In conversation about a year ago permalink
    • Embed this notice
      Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:10:02 JST Dushman Dushman
      in reply to
      • Fish of Rage

      @gaijin @sun@shitposter.world
      Yeah that's the problematic part. Look at XMPP omemo encryption if you wanna know what issues that would cause lol.

      In conversation about a year ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:22:38 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      @gaijin @dushman I'm familiar (I work in the industry) but the reaction is almost completely emotional not factual.
      In conversation about a year ago permalink
    • Embed this notice
      Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:22:39 JST Gaijin Gaijin
      in reply to
      • Dushman
      • Fish of Rage

      @dushman @sun@shitposter.world Depends on the blockchain and the confirmation system they are using. PoW (Proof of Work) is indeed insane but alternatives are being found like the Solana one with their PoH (Proof of History)

      https://pbs.twimg.com/media/FuPlY7dWYAEQvm_?format=jpg&name=large

      In conversation about a year ago permalink

      Attachments


      1. https://pbs.twimg.com/media/FuPlY7dWYAEQvm_?format=jpg&name=large
    • Embed this notice
      Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:22:42 JST Dushman Dushman
      in reply to
      • Fish of Rage

      @sun@shitposter.world @gaijin@den.raccoon.quest
      Someone was pissed at that specifically? The actual transactions are very energy intensive which is a valid point.

      In conversation about a year ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:25:27 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      @dushman @gaijin I did say that the key operations don't do transactions, they are just normal cryptography on the client machine alone.

      eth wallets are what are usually on the table and they switched to a system a couple of years ago that doesn't boil oceans so everybody just switched their argument to "it's still bad because it USED TO do that"
      In conversation about a year ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:31:37 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      @dushman @gaijin most people here are extremely anti-crypto no matter what. I'm not talking about you, who has some concerns/objections, but people that have a giant emotional reaction to the idea of using a crypto wallet for any purpose.
      In conversation about a year ago permalink
    • Embed this notice
      Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:31:39 JST Dushman Dushman
      in reply to
      • Fish of Rage

      @sun@shitposter.world @gaijin@den.raccoon.quest I did say that the key operations don't do transactions, they are just normal cryptography on the client machine alone.I know. I was asking if someone made a fuss about that for some reason.

      In conversation about a year ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:53:27 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      @dushman @gaijin that is fair but at the same time consider that all of this applies to anyone in normal finance and these same people still beg using paypal
      In conversation about a year ago permalink
    • Embed this notice
      Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:53:29 JST Dushman Dushman
      in reply to
      • Fish of Rage

      @sun@shitposter.world @gaijin@den.raccoon.quest
      Yeah I guess a lot of them are here. Overly enthusiastic cryptobros are just as cringe though. Also energy usage aside, seeing more use as a vehicle for speculation than actual currency is another big problem imo.

      In conversation about a year ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:55:41 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      • ロミンちゃん
      @gaijin @dushman @romin I declare this is now a crypto thread.
      In conversation about a year ago permalink
    • Embed this notice
      Gaijin (gaijin@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:55:44 JST Gaijin Gaijin
      in reply to
      • Dushman
      • Fish of Rage
      • ロミンちゃん

      @romin@shitposter.world @sun@shitposter.world @dushman@den.raccoon.quest No, there are a lot of scams in crypto. Nuance.

      In conversation about a year ago permalink
    • Embed this notice
      ロミンちゃん (romin@shitposter.world)'s status on Thursday, 16-May-2024 02:55:45 JST ロミンちゃん ロミンちゃん
      in reply to
      • Dushman
      • Fish of Rage
      @sun @dushman @gaijin but crypto is a scam (a very profitable one)
      In conversation about a year ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Thursday, 16-May-2024 02:57:18 JST Fish of Rage Fish of Rage
      in reply to
      • Dushman
      @dushman @gaijin I separate you from the lunatics I'm talking about, friend.
      In conversation about a year ago permalink
    • Embed this notice
      Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:57:21 JST Dushman Dushman
      in reply to
      • Fish of Rage

      @sun@shitposter.world @gaijin@den.raccoon.quest
      Well I'm not too fond of traditional finance or capitalism in the first place. I do consider that.

      In conversation about a year ago permalink
    • Embed this notice
      Dushman (dushman@den.raccoon.quest)'s status on Thursday, 16-May-2024 02:58:29 JST Dushman Dushman
      in reply to
      • Fish of Rage

      @sun@shitposter.world @gaijin@den.raccoon.quest
      Oh yeah I'm not implying you aren't. Just saying what I think about this.

      In conversation about a year ago permalink
      Fish of Rage likes this.

Feeds

  • Activity Streams
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.