GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Notices by tsk (tasket@infosec.exchange)

  1. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Sunday, 29-Jun-2025 10:30:33 JST tsk tsk

    Why didn't they call #Wayland X12? :blobthinkingcool:

    In conversation about 3 months ago from infosec.exchange permalink
  2. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Wednesday, 25-Jun-2025 14:00:29 JST tsk tsk

    :windows: 👀 In today's twisted and weird extortionists file: #Microsoft

    "Windows 10 home users who want to delay switching to Windows 11 can enroll in the Extended Security Updates (ESU) program at no additional cost using Microsoft Rewards points or enabling Windows Backup to sync their data to the cloud."

    #surveillancecapitalism #windows #spyware #theywantyourdata

    https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-10-extended-security-updates-available-using-reward-points/

    In conversation about 3 months ago from infosec.exchange permalink
  3. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Monday, 16-Jun-2025 23:09:32 JST tsk tsk
    in reply to
    • Timnit Gebru (she/her)

    @timnitGebru They vacillate between "we can escape the rabble" to "oh shit, we can't. let's find ways to get them to kill each other while we make healthcare inaccessible to them".

    In conversation about 3 months ago from infosec.exchange permalink
  4. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Tuesday, 03-Jun-2025 18:58:49 JST tsk tsk
    in reply to
    • Tim Chambers

    @tchambers Protocol handlers are basically just definitions. The ActivityPub spec at W3C should be revised to include such a definition.... choose a handler prefix such as 'apub://' and include some commentary on which server names (or "bottom-level domain") typically serve what kind of content (for example, if infosec.exchange wanted to do an images service, it could be apub://pix.infosec.exchange). I can't imagine this would take up more than 3 paragraphs. Also, this is "User-friendly Internet 101" stuff from the 90s.

    In conversation about 3 months ago from infosec.exchange permalink
  5. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Monday, 02-Jun-2025 17:21:46 JST tsk tsk
    in reply to
    • Tim Chambers

    @tchambers I would add having zero algorithmic mitigations for TL annoyances, the most glaring being that popular posts re-appear frequently. And if I follow someone, I will see every single message in the threads they start... maybe I only want to see the first two until I click on the thread?

    I would like to see what popular posters are talking about instead of having to temp. mute them over and over to keep my TL readable.

    In conversation about 3 months ago from infosec.exchange permalink
  6. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Monday, 02-Jun-2025 17:18:29 JST tsk tsk
    in reply to
    • Tim Chambers

    @tchambers Not having a protocol handler for ActivityPub content is the reason users end up on "foreign" instance pages. And that bandaid, where a foreign instance is prompting you to login to your home server, is very very bad. No user base should ever be conditioned to accept that kind of interaction (a phisher's dream).

    This is also the reason why news, blog, etc. sites avoid putting "Share with fedi" buttons on their pages.

    Having a protocol handler registered for AP would whisk the user to their preferred fedi app or website to handle whichever kind of request they're initiating. Yes, fedi should be that much like email.

    In conversation about 3 months ago from infosec.exchange permalink
  7. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Wednesday, 21-May-2025 21:51:00 JST tsk tsk
    in reply to
    • adfichter 🖋

    @adfichter Between Outlook 365 requiring email copies sent to MS servers and the Windows Recall misfeature, the MS stack now looks like a platform for spying on the plebes.

    Assuming MS can assure institutions that any "cloud" involved in the spying will stay in the jurisdiction, then they may find it an attractive proposition.

    There is also the issue that Russian hackers gain entry to MS systems and conduct major heists on a semi-regular basis. Choosing the platform that will be most vulnerable to Russian hacking should raise additional questions.

    In conversation about 4 months ago from infosec.exchange permalink
  8. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Sunday, 16-Mar-2025 01:02:11 JST tsk tsk
    in reply to

    @dalias After the article says this:

    "an absolute no-go for the more privacy minded among us, and honestly, it’s hard to blame them. The whole thing is pretty creepy when you think about it."

    ...they proceed with a video showing their repurposed unit in the original housing.

    I appreciate the agency to explore and tinker, but repurposing the bag-of-glass kit for a real function is tempting fate. You think you repurposed the tractor as an ATV without realizing you still have a body-mangling tiller still attached. The people who wrote the reverse-engineered drivers don't know what's really in that silicon AND, yes, you are likely depriving FOSS-respecting hw vendors the chance to grow their business.

    It is a false economy.

    Putting this in context, I've been recommending routers with Mediatek chipsets because that co. maintains open source drivers for them, and they work great with OpenWRT. No one around here f*cking cares. They want to brag about how their Netgear trash fought them and they won some little victory over it, or maybe go back to the "Oh Nvidia" wailing wall for some predictable Linux commiseration. I think the stupidity is breathtaking.

    Based on what I'm seeing, there will be a LOT more pain from the tech sector. None of the various flavors of big tech fetishists are going to stop it or even slow it down.

    In conversation about 6 months ago from infosec.exchange permalink
  9. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Saturday, 15-Mar-2025 23:42:20 JST tsk tsk
    in reply to
    • Rich Felker

    @dalias Sorry, I don't give much notice to "branch of the thread".

    Software isn't going to fix everything that is wrong with a piece of hardware. And part of what's wrong is that people may notice such a surveillance device and assume you have certain intentions. And that people with tech fetishes don't (yet) take those social issues into account.

    In conversation about 6 months ago from infosec.exchange permalink
  10. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Saturday, 15-Mar-2025 22:53:38 JST tsk tsk
    in reply to
    • Enron Hubbard
    • Rich Felker

    @dalias @enron @mc_lewis This is founded on the conceit that a machine will only do what you tell it, and not what others (like, hackers) tell it.

    Amazing how quickly that notion insinuates itself when "open source OS" is mentioned: The illusion that you control something perfectly. You don't know what surprises are in there or in what respects the cheesy reverse-engineered drivers are lacking.

    it's exactly the same situation as any PC or phone.

    Just no. And the fact that brands are trying to sell these cheap un-PC-like devices en masse is the main clue. If I slice a mic out of a laptop or phone, it still functions fine when I attach a headset. Do the same on a spy-tchotchke device and its reason for being is gone. The fact that it has been physically streamlined for that role is part of the problem.

    In conversation about 6 months ago from infosec.exchange permalink

    Attachments

    1. No result found on File_thumbnail lookup.
      http://lacking.it/
  11. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Saturday, 15-Mar-2025 21:49:39 JST tsk tsk
    • Enron Hubbard
    • Rich Felker

    @enron @dalias @mc_lewis It is still a wireless microphone connected to the Internet, and you have little-to-no feedback on what its internal state is like (unlike a PC or phone).

    Without a hardware cutout switch on the mic, its tempting fate.

    In conversation about 6 months ago from infosec.exchange permalink
  12. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Friday, 31-Jan-2025 18:23:38 JST tsk tsk
    in reply to
    • Ryan Castellucci :nonbinary_flag:

    @ryanc I'd say not. Reliability is far better than Ext4-on-Thin LVM, and its worst-case throughput scenarios (esp. large container disk image files) have simple workarounds.

    Its still fashionable to do benchmarks comparing Btrfs with plain XFS and Ext4. IMO those comparisons only tell you that copy-on-write has a cost. If you want copy-on-write features then Btrfs performance on Linux >6.1 kernels is solid.

    There are no more "out of metadata space" oopses as Btrfs will now automatically allocate more mdata space as needed.

    Of course btrfs-send is brilliant (better than zfs-send) although there are other backup tools like Wyng that can achieve a similar level of efficiency using the metadata Btrfs makes available.

    In conversation about 8 months ago from infosec.exchange permalink
  13. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Thursday, 23-Jan-2025 04:24:00 JST tsk tsk

    So let me see if I've got this straight about Bluesky:

    Anyone can host their own domain, and their identity on that domain. But the Bluesky org controls the "app view" and also the "bsky.app" domain through which all links to Bluesky content are referenced.

    :blobcatthinkingsmirk: :blobthinkingcool:

    But.... "you control your identity". Except Bluesky corp can cut it off from the rest of the Internet because web sites must reference the content via 'bsky.app' URLs. So your identity is really '@bsky.app' no matter what screen name says.

    :blobcatthinkingsmirk: :blobthinkingcool:

    I must be missing something. Please someone explain it to me like I'm in grade school...
    #bluesky #bsky #decentralization #techbros

    In conversation about 8 months ago from infosec.exchange permalink
  14. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Thursday, 23-Jan-2025 02:39:32 JST tsk tsk
    in reply to
    • Tim Chambers

    @tchambers Yep, this is all we have, but only about 1M people worldwide can stomach fedi's shortcomings. Almost all of us are some type of Linux/FOSS enthusiast which ought to be a gigantic red flag that something is fundamentally wrong with UX – things I've complained about but no one with any ActivityPub expertise has acknowledged.

    TL;dr We are fucked.

    In conversation about 8 months ago from infosec.exchange permalink

    Attachments


  15. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Thursday, 09-Jan-2025 18:12:57 JST tsk tsk
    in reply to
    • Eugen Rochko
    • RRB

    @rrb @Gargron Any instance with a conscience would defederate #Threads

    In conversation about 8 months ago from infosec.exchange permalink
  16. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Thursday, 09-Jan-2025 13:18:35 JST tsk tsk
    in reply to
    • Eugen Rochko
    • Erik Uden 🍑
    • :projetstodon: Shalien

    @shalien @ErikUden @Gargron Fedi is still too rough around the edges.

    For one, people start to gain traction and then it flops because why? Ans: Popular posts become super annoying, recurring in TL dozens or hundreds of times per day..... so people react by muting those users and conversations.

    Little if any chance you'll see replies (to other users' threads) from people you follow show up in your TL. Great candidate for a simple "algorithm"; as it stands its just poor engagement.

    Picture-only posts where most people can't view the thread, because the only place to click on such posts is a 1px tall line about 3px under the poster's avatar.

    Its very sad. Years back I donated money to Mastodon, but there are still UX holes you can drive a truck through and nothing is done about it. UX isn't taken seriously here, so its mainly techies that stick around.

    In conversation about 8 months ago from infosec.exchange permalink
  17. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Saturday, 04-Jan-2025 14:52:19 JST tsk tsk
    • Infoseepage
    • AppleInsider

    @Infoseepage @appleinsider Tim Cook is in the "coming out of the closet after making Billion$" club. He probably feels he's got more in common with Peter Thiel than any of us.

    In conversation about 8 months ago from infosec.exchange permalink
  18. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Thursday, 19-Dec-2024 19:30:50 JST tsk tsk
    in reply to
    • Michał "rysiek" Woźniak · 🇺🇦

    @rysiek Who is Starlabs? Never heard of them.

    In conversation about 9 months ago from infosec.exchange permalink
  19. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Tuesday, 03-Dec-2024 03:53:07 JST tsk tsk
    in reply to
    • Peter Bhat Harkins

    @pushcx Also, is the page content being uploaded to Google so they can decide what/where to inject? That is a potential spyware issue.

    In conversation about 9 months ago from infosec.exchange permalink
  20. Embed this notice
    tsk (tasket@infosec.exchange)'s status on Monday, 02-Dec-2024 20:45:50 JST tsk tsk
    in reply to
    • jenny (phire)
    • Valerie Aurora

    @vaurora @phire Going by the tone of the article, I would argue that all the apps they feel are necessary aren't actually enhancing that person's life.

    Many people still feel like they did in the 2010s, that incorporating an app/service into their life is an act of personal agency and freedom so they habituate to using more and more. But they are learning its actually the opposite of freedom.

    In this case, the extent of the damage appears to be that no one is stepping in to offer a clean migration path to a different server. And there is no big-bucks foundation offering to maintain a stable fork.

    Rejecting the idea of enshittification, though... that sounds like rejecting a radical perspective. The term appears to the author to stop the conversation, when its really recognizing the underlying societal malady. (And how is calling it "modernity" any better?) If you don't want to talk about SV oligarchy and such, and want technical solutions instead then the conversation is about finding a data store that never goes away (maybe something Velid is what you need).

    In conversation about 10 months ago from infosec.exchange permalink

    Attachments


  • Before

User actions

    tsk

    tsk

    IoT #InternetOfShit #QubesOS #FOSS Stanning for bigtech, threads, bsky, cryptocurrency = Block.Fun to be with, but not actually made of plastic.Wrote some things for #QubesOS"There is no sanctum or honor among technophiles."

    Tags
    • (None)

    Following 0

      Followers 0

        Groups 0

          Statistics

          User ID
          105625
          Member since
          9 Mar 2023
          Notices
          28
          Daily average
          0

          Feeds

          • Atom
          • Help
          • About
          • FAQ
          • TOS
          • Privacy
          • Source
          • Version
          • Contact

          GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

          Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.