Notices by Sandra (sandra@idiomdrottning.org), page 2

This is wrong:

Using systemd on publicly accessible ssh: update RIGHT NOW NOW NOW
Otherwise: update RIGHT NOW NOW but prioritize the former

https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27

No, the exploit doesn’t rely on systemd being run or even installed. If you have the poisoned version, update right away please. The infected version is infected even without systemd (just as long as it’s run as other than arg0, which is the case with many init systems.). Now, it is because of systemd that Debian and Red Hat shipped a version of sshd that was dynamically linked to liblzma. So that’s the connection to systemd. But it’s “SSH linked to liblzma” that’s exploited, not “SSH inited by systemd”.

Delta Chat and Thunderbird both seem more afraid of accidentally sending an unreadable encrypted message than accidentally sending an unencrypted message. I kinda would want the opposite philosophy ideally.

Texinfo in particular is structured, semantic, accessible, and has a glorious legacy of being one of the very first public hypertexts.

Rather than killing it, I’d want to improve its web exported output, make it easier to write, but keep the specific reading apps around.

https://idiomdrottning.org/the-dystopia-of-web-only-documentation

@snarfed.org@fed.brid.gy

Yes, this is positive. What I want specifically is this:

• My AP posts to also show up over there on AT
• (This should be opt-in because a lot of other people do not want to be proxied, but I’d wanna give it a try at least.)
• People can post replies to my AP posts from there and I can reply back and forth in a convo
• I can block individuals who behave badly or turn off the whole bridge if it’s too many

This is similar to how I am on OFTC normally but Matrix people can reach me at the bridge on @_oftc_sandra:matrix.org and those comments show up over on my OFTC account and I don’t even have to notice they’re on Matrix.

I’m not in a hurry to start following people who are on AT 🤷🏻♀️ even though that might be fun down the line.

I’m scared AT will be way more toxic and twitterlike since they deliberately are designing for an algo-driven world/global timeline which is the opposite of the bubble-coziness we have here on Fedi.

@activitypubblueskybridge

Alex writes:

It’s not written for the day job. It’s not written to see the light of day at all. It’s not written to be looked at and scrutinized by anybody. It’s intimate and personal, it’s messy and buggy. To take a look is to transgress.

That is absolutely how I feel. But I’ve gotten better at releasing libraries, tools (like 7off), plugins that can be more polished part of the system. It’s just that the glue code of things with all its hardcoded URLs and hacky tags is… uh…

https://alexschroeder.ch/view/2023-11-16-personal-software

Most people outside of the hacker community think that other people’s privacy is only creepy.

I was listening to the news the other day and the reporter was indignantly yelling at a postal delivery company for not opening more packages to check for drugs. Even though that would be illegal to do.

However, these bans are technically not doable without a complete lockdown on all computers ever made. Like a super gooped down Android or iOS with no sideloading. Goodbye general purpose computerGgpc, hello spyware appliance.

There are plenty of good reasons beyond privacy to not wanna attempt such a horrific lockdown.

https://idiomdrottning.org/dont-ban-e2ee

@Suiseiseki

As far as I can tell, authors could make money by selling physical books of texts and access to digital copies

I’m not very happy with that setup. Not only are book sales top-heavy as that post shows, the entire idea of limiting access to digital copies goes against the pay-it-forward cornucopia of mittens and socks: https://idiomdrottning.org/mittens