Notices by Hrefna (DHC) (hrefna@hachyderm.io)

https://woof.group/@aphyr/113839836081328125

Here’s an in-depth analysis of Proton Mail’s security architecture as of 2021:

https://eprint.iacr.org/2018/1121.pdf

It’s highly technical, but here’s the headline: “As it stands, ProtonMail does not meet its self-professed security goals when these are subjected to analysis.”

Maybe they’ve fixed things since 2021 — but fundamentally, Proton Mail is trying to make a pig fly here; email protocol just weren’t designed for E2E encryption. There will always be leaks, slips, gaps.

7/

@miah

Also has helped my sleep. You can see it clearly on my sleep trackers. Not a cure-all (chronic insomnia is a PITA still), but _definitely_ helpful.

Fun fact: This is partly because with oral progesterone it produces above-typical levels of metabolites like allopregnanolone and pregnanolone, and a lot of these have sedative effects.

@jenniferplusplus @robin @thisismissem

@puppygirlhornypost2 as a backend for duckduckgo?

@Euan ah, a Microsoft PowerPoint transition

@puppygirlhornypost2 Yup, that's basically how you fix it as a third party as well. You hold the wrist and slowly push it to where you want it to be (or sometimes not as slowly, but same idea), working the tendons and muscles to the correct positions.

As you say: The surgeries often seem to make things worse in general even when they fix the problem and certainly add complications to everything. Lots of tradeoffs there: we just don't have good treatments, unfortunately :/

Ankles are _the worst_ and I'm not nearly as comfortable with those as I am with wrists x_x

@puppygirlhornypost2 I have two (2) partners with EDS and in both cases I've gotten _very_ used to fixing their hands and wrists (years of learning how to break wrists also leads to some basic knowledge of how to fix them).

Nothing quite as severe as what you are describing, but some things in the neighborhood. It's… impressive.

*logs in*

*catches up on meta*

You know. Every time I do this I am more certain about moving most of my posting over to bsky.

It isn't the model I want—and it has plenty of problems of its own—but it is far, far healthier than what I continue to see here except for on a handful of systems, and gives better tools for individuals to manage some of its problems.

I miss a lot of the people here and I still come back when I am doing some protocol work, to take advantage of the followers only system, or catch up with people over here… but I am largely disengaged for my day-to-day social media consumption and every time I do a deep dive in another meta I see why that is a good thing.

https://bsky.app/profile/hrefna.dev

@mpuckett259 Oh I know this feeling! Intimately.

This is really not surprising to me. Like. At all. https://universeodon.com/@mathew/113754581566019846

@RnDanger Yeah, absolutely bizarre.

I can't tell you the number of times I've been in a meeting (and even more where someone in my reporting chain has) with some upper-level person says "why is this still a problem" and can't seem to hear that the answer is…

…them.
https://infosec.exchange/@JessTheUnstill/113749183198586389

Surgery 1 consultation set and confirmed, Surgery 2 fully arranged, Surgery 3 and Procedure 4 TBD but both can't even be consulted on until at least after the S1 consultation.

Gender affirming care is expensive. In time, money, energy, executive function, and recovery.

@julia spirrraaalllllssss

@Legit_Spaghetti Short answer:

Here everything seems to be about _fixing the protocol_ or questions like "how do I get this to work with mastodon, like, ever." The exceptions are monumental tasks.

Everything goes _inward_.

There, everything is "I have this cool idea for a project!" that goes _out_ from the protocol.

They are building _applications_, we are building _infrastructure_ because we can't do anything else.

If you are on BlueSky as well and you are a developer, I want you to do a little experiment.

Look around at how people talk about their projects with ATP and the _kinds_ of projects they are talking about.

Then compare and contrast with how people talk about their projects with AP and the _kinds_ of projects they talk about.

It's eye opening.

@aburka [everybody disliked that]

One could also envision a series of redirects.

My information is stored on server <foo> but all of my canonical ids reference hrefna.dev/whatever.

Why? Because I'm proxying the calls over to a backend server that I reserve the right to change in the future.

There are a thousand things you can do from here, but basically we now have a basic lightweight framework for a scalable, message-passing-based social network.

10/10

Now it does not matter if the same actor serves multiple users, or multiple inboxes for a user, or whatever else. It does not matter if they are all distinct actors that then forward their information to a central actor that then fans them out to other servers entirely.

What matters is that you fetch the user object from a canonical store and it tells you where the actors live and information like how to fetch posts from this person.

9/

Now what about the user?

Users do not exist in the message layer. They _are not actors_.

Rather they _contain_ actors.

You get the user information from anything. DNS, a credentials server, I don't care about that for right now, but it has on there an inbox object, or maybe multiple named inbox objects, and they have actor _references_ (see above) that you can now send messages to.

8/