GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Notices by ww (ww@xyzzy.link), page 2

  1. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 20-Jul-2025 14:45:39 JST ww ww
    in reply to
    • Lizzie
    @lizzie bad take ngl bestie
    In conversation about 3 months ago from xyzzy.link permalink
  2. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 13-Jul-2025 08:43:53 JST ww ww
    in reply to
    • Jesse 🇫🇷
    @jessew are you gonna ask if i'm plural, polyamorous, european, a communist, a linux user and a javascript hater next? :p
    In conversation about 3 months ago from xyzzy.link permalink
  3. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 13-Jul-2025 08:40:04 JST ww ww
    in reply to
    • Jesse 🇫🇷
    @jessew fedi was supposed to be free from stereotypes :(
    In conversation about 3 months ago from xyzzy.link permalink
  4. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 13-Jul-2025 08:36:26 JST ww ww
    in reply to
    • Jesse 🇫🇷
    @jessew that's kinda rude, are cis girls not allowed to be autistic
    In conversation about 3 months ago from xyzzy.link permalink
  5. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 13-Jul-2025 08:22:22 JST ww ww
    in reply to
    • Jesse 🇫🇷
    @jessew you aren't the first to ask that ^^;
    In conversation about 3 months ago from xyzzy.link permalink
  6. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 13-Jul-2025 08:15:31 JST ww ww
    in reply to
    • Jesse 🇫🇷
    @jessew secure element based google pay i don't think needs to? whether or not it does is a different question. but i think it exchanges them for some kinda token through the payment network, and uses that to provision the virtual card with its own account number (and a secure element-based 3d secure challenge). i'm not entirely sure what google's role in mediating payments through it is, but it does mitm the transactions and get all their details in that case, the exact same as apple pay.

    also they used to use host card emulation (≈"cloud secure element") before, but i don't think they do anymore? but like, with apple pay, i don't think apple stores even the virtual card number, it should stay in the secure enclave.
    In conversation about 3 months ago from xyzzy.link permalink
  7. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 13-Jul-2025 08:03:47 JST ww ww
    in reply to
    • Jesse 🇫🇷
    @jessew well there's no need for that
    In conversation about 3 months ago from xyzzy.link permalink
  8. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 13-Jul-2025 08:03:23 JST ww ww
    in reply to
    • Jesse 🇫🇷
    @jessew yeah i don't see the difference between that and autofill, other than that google gets to store your details on their server, potentially in violation of pci dss (?)
    In conversation about 3 months ago from xyzzy.link permalink
  9. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 13-Jul-2025 07:54:54 JST ww ww
    in reply to
    • Jesse 🇫🇷
    @jessew it's encrypted, but you do get some kinda card details verbatim
    https://developers.google.com/pay/api/web/guides/resources/payment-data-cryptography#pan_only
    In conversation about 3 months ago from xyzzy.link permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: www.gstatic.com
      Payment data cryptography for merchants  |  Google Pay API  |  Google for Developers
  10. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 13-Jul-2025 07:49:20 JST ww ww
    in reply to
    • Jesse 🇫🇷
    @jessew what do you mean by that? i'm reading developer docs, and so when paying from chrome for android it can give you a 3ds cryptogram, but for any other devices, you just receive a card PAN and expiry date. and you have to trigger 3d secure yourself.

    https://developers.google.com/pay/api/web/guides/tutorial#supported-card-networks

    and google can't even see the transactions made that way, according to https://support.google.com/googlepay/answer/13623624

    so i guess my question is, does it just transmit the card saved on file, and if so, what's the point? supposedly US-based users can use "virtual cards", which kind of resembles apple pay, but it's US-only.
    In conversation about 3 months ago from xyzzy.link permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: www.gstatic.com
      Tutorial  |  Google Pay API  |  Google for Developers
    2. No result found on File_thumbnail lookup.
      View transactions on the Google Wallet website - Google Pay Help
      Important: Your subscriptions and purchases from Google products, including Google Play, YouTube, or Google One are currently not available to view or manage on the Google Wallet website. Learn
  11. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 13-Jul-2025 07:33:57 JST ww ww
    so is google pay on the web just sparkling google-assisted autofill?
    In conversation about 3 months ago from xyzzy.link permalink
  12. Embed this notice
    ww (ww@xyzzy.link)'s status on Thursday, 10-Jul-2025 06:03:57 JST ww ww
    in reply to
    • SuperDicq
    @SuperDicq data that includes instructions executed in a virtual machine? then javascript is just data as well.
    In conversation about 4 months ago from xyzzy.link permalink
  13. Embed this notice
    ww (ww@xyzzy.link)'s status on Thursday, 10-Jul-2025 06:03:23 JST ww ww
    in reply to
    • SuperDicq
    @SuperDicq i think pretty much every font file is a program, but like why does that even matter?
    In conversation about 4 months ago from xyzzy.link permalink
  14. Embed this notice
    ww (ww@xyzzy.link)'s status on Thursday, 10-Jul-2025 05:37:22 JST ww ww
    in reply to
    • SuperDicq
    @SuperDicq they're free not to run my program, but it's their personal choice. they shouldn't tell me what to do or claim it as some kinda universal truth.

    and it's not like markup and styling are all that different. css is turing complete, though it can't loop without user interactions. i believe truetype fonts are turing complete as well. i don't think it being a program is a useful distinction. though i do like being able to easily try random people's programs in a sandbox instead of installing them on my computer.
    In conversation about 4 months ago from xyzzy.link permalink
  15. Embed this notice
    ww (ww@xyzzy.link)'s status on Wednesday, 09-Jul-2025 19:25:16 JST ww ww
    > personal websites don't need [technology]

    did you miss the part where personal websites are personal and it's up to the author to decide what theirs needs?
    In conversation about 4 months ago from xyzzy.link permalink
  16. Embed this notice
    ww (ww@xyzzy.link)'s status on Tuesday, 10-Jun-2025 03:39:47 JST ww ww
    in reply to
    • Lizzie
    • anemone
    @anemone @lizzie well, that problem solved itself with the akkoma fork
    In conversation about 5 months ago from xyzzy.link permalink
  17. Embed this notice
    ww (ww@xyzzy.link)'s status on Tuesday, 10-Jun-2025 03:38:43 JST ww ww
    in reply to
    • Lizzie
    • anemone
    @anemone @lizzie from my experience the average vanilla mastodon user doesn't even know enough about fedi to feel morally superior. also, it's the default, the whole point of elitism is you're better cause you don't use the default!
    In conversation about 5 months ago from xyzzy.link permalink
  18. Embed this notice
    ww (ww@xyzzy.link)'s status on Tuesday, 10-Jun-2025 03:36:13 JST ww ww
    one of the things that makes mastodon better than other fedi softwares is that mastodon users don't act like they're morally superior for using it
    In conversation about 5 months ago from xyzzy.link permalink
  19. Embed this notice
    ww (ww@xyzzy.link)'s status on Tuesday, 10-Jun-2025 03:36:08 JST ww ww
    in reply to
    • Lizzie
    @lizzie sounds like i struck a nerve 🙃
    In conversation about 5 months ago from xyzzy.link permalink
  20. Embed this notice
    ww (ww@xyzzy.link)'s status on Sunday, 08-Jun-2025 16:11:05 JST ww ww
    in reply to
    • Lizzie
    • nyanide :nyancat_rainbow::nyancat_body::nyancat_face:
    @nyanide @lizzie if enough people do it, maybe it'll get fixed. not like this is an inherent protocol vulnerability and not an implementation one.
    In conversation about 5 months ago from xyzzy.link permalink
  • After
  • Before

User actions

    ww

    ww

    Tags
    • (None)

    Following 0

      Followers 0

        Groups 0

          Statistics

          User ID
          206061
          Member since
          31 Oct 2023
          Notices
          60
          Daily average
          0

          Feeds

          • Atom
          • Help
          • About
          • FAQ
          • TOS
          • Privacy
          • Source
          • Version
          • Contact

          GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

          Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.