Notices by Erin 💽 (erincandescent@queer.af), page 3

@james anyway basically CCC (and the similar but smaller events) are kinda unique in many ways and so you end up with a situation where people moan about them and try to complain from within because there's not really any alternative equivalents

@jonty @james from my experience/observations I think most of the time they do a better job than your average professional hired security team, but they're not without their flaws or limits

@thisismissem Truth, the only notion that the core protocol has of "instances" is in origin checking of received messages

(basically: don't trust a message authenticated as https://example.com/@user to contain valid contents for any posts outside of scope of https://example.com/)

(n.b.2. this is also why you can't take "your" keys with you; having per-user keys is also a lie, and kinda pointless, and we could probably simplify the protocol if we didn't have them)

@thisismissem n.b.3 i'm kinda sad we ended up with HTTP Signatures instead of something better, I wanted to do something with OAuth2 which I still think would have been cleaner in practice

I totally forgot about the .ing sunrise period

Uh. I guess I should figure out what to do with federat.ing and defederat.ing...

Seeing the #37c3 photos tugs at my heart strings. I've missed this! I want to be there again!

But on the flip side the event isn't even open yet and I'm aware of multiple COVID cases among buildup crews...

Please stay safe out there.

I expected nothing and I'm still disappointed...

@0x47df GTS doesn't let you turn it off.

I expect you do get lots of errors...

@mcc gzip is "deflate with gzip headers" and "deflate" is "deflate with zlib headers"

why do we have both? historical reasons...

@mcc generally yes

Old (we're talking ancient) versions of IIS would send a raw deflate stream for "deflate" (without zlib headers) so everyone has shied away form it and preferred deflate ever since

(who can blame them, the encoding token should be "zlib"...)

@mcc browsers these days tend to prefer "gzip" over "deflate". webservers often only implement "gzip"

all this becuase nobody has ever misimplemented gzip, but Microsoft did once in the 90s misimplement "deflate"

@mcc the (difference between "gzip" and "deflate" is gzip has 12 bytes more overhead and a slightly slower checksum)

@hrefna Oh good lord why are Links allowed there

James Snell has a lot to answer for IMO...

@hrefna I'm sure there's a reason so many properties admit links.

But I think it was an awful idea and everyone should stick their fingers in their ears and ignore it

@hrefna I don't have any complaints about the size of the ActivityStreams vocabulary; I think providing the mechanisms for most forseeable social networking use cases was a good idea

But basically every property that's Link | SomethingElse? I hate it

@carnage4life Health hazard: Pooh is public domain in America, but not the UK. Depending upon local copyright terms, he may or may not still be copyright protected in your locale

(International copyright normally follows "law of the shorter term", which means something becomes PD at the earlier of when it would become PD under local law or the law of the country of origin)

None of this caveat applies to Mickey: entering the public domain in the US (his country of origin) makes him PD everywhere

The ActivityStreams2 Link object is such a cause of confusion

(Slightly facetiously): Linked Data did not need Links

@hrefna I consider the link option invalid

@hrefna "The inbox MUST be an OrderedCollection", a Link is not an ordered collection

(FWIW, I hate most uses of Link in AS2)

The design of BGP Graceful Restart baffles me a bunch

Expectation: State is retained (for the grace time) if

• Session is explicitly shutdown with a graceful restart reason, or
• The peer establishes a new session and states it's restarting in its OPEN message (and the non-restarting router hadn't yet observed that the connection has dropped)

Reality: State is retained if

• You don't send a clean shutdown message

It kinda feels designed to cause accidental packet blackholing to me...