Notices by Vincent Sparks (avincentinspace@furry.engineer)

@tofu @voltrina recaptcha collects personal information and, if it can't, gives the user an mturk task, so that google can make money.

i really don't think that's comparable to a proof of work challenge.

also, what would you rather sysadmins do? do you have another, more ethical piece of software in mind that they could defend their sites with? or should they simply let the continuous DDoS from LLM scrapers send their hosting bills into the stratosphere and/or knock them offline?

@icedquinn I'm sorry what

I knew Overstreet had gone full slopbro but WHAT

@soatok

"Failure is not an option. It's mandatory. The option is whether or not you let failure be the last thing you do."

--The Seventy Maxims of Maximally Effective Mercenaries, maxim #70

@soatok :blobfoxthonking: that sounds suspiciously like something a good boy would say...

@HauntedOwlbear

There are pieces of software that will allow a Bedrock client to join a Java server. https://github.com/GeyserMC/Geyser/

@lunarloony

@soatok even this aside, vulnerable cryptography is the *least* of matrix's issues.

anyone seriously proposing it as a discord alternative needs to take their rose tinted glasses off and look at the 30 second message round trips, the chat history easily being lost if one of a user's clients has a key synchronization bug, and the holes in their moderation tooling big enough to drive a truck through (and listen to the stories from trans people of the conga lines of trucks actively being driven through them on a daily basis)

i don't like discord. but even if your threat model does not require encryption at all, nothing about matrix is salvageable

@soatok inside of you, there are two wolves

you're being spitroasted by two murrsuiters

@vozercozer who the fuck uses rocket emojis besides crypto bros

@raccoon @sun@shitposter.world @N33R i have a homework assignment for you, type "php password-hash vulnerability" into your search engine of choice and tell me how many results you get back.

@N33R so the funny thing about discord is that most people don't log into it using google

@raccoon @N33R and that's fair enough. no outfit is perfect. but when discord gets a data breach, it makes the news. everyone has to care and everyone changes their password because of it. (or they do if they're smart, which most people don't.)

when the smash mouth message boards get hit with a data breach, and you don't happen to see that corporate half-apologetic email, you might not even *know.* it might happen once or twice a MONTH for all you know. the people running the website might not know either. at least when discord got breached they found out and told everyone within 24 hours

@raccoon @N33R make it secure, he says, as if that's the easiest thing in the goddamned world

i don't like google or github or who the fuck ever either, but they can afford to hire a cybersecurity analyst. with the $0 you pay me to use my service, i cannot.

@raccoon @N33R you just think i should do it for free.

or were you planning to use my website if there was a $20 signup fee?

@raccoon this is a good meme and all, but is terrible cybersecurity practice

as a programmer, i do NOT want to store your password. that is WAY too easy to do slightly wrong in a way that will leave everyone vulnerable if i ever experience a data breach and is definitely something best left to the professionals, like google and github and whatnot. they let you log in through their website, they store your password using their billions of dollars of infrastructure that they use to keep passwords safe that i do not have, and they pass me an auth token, which if it gets leaked in a data breach, is pretty much useless outside of my website. also, if you want to delete your account from my website, you don't even have to go to my website, you can just log into google's OAuth management system and say "i don't want to be associated with this website anymore" and it'll zap the OAuth key and unless i kept your email address i won't be able to interact with you at all anymore.

alright, very funny guys, you got me, now who made Cloudflare give the ruby transphobia guy millions of dollars to share his dotfiles

#omarchy

@prettygood @vozercozer a compelling argument

@BrodieOnLinux but wait, isn't KDE Neon already a thing

@thomasfuchs i'm not inherently anti gun but... even in school zones?

@d6 It truly saddens me how many wizards nowadays have simply accepted needing to perform a ritualistic sacrifice _every_ lunar cycle just to keep their imp happy and there to help them work on spells.

Nearly any common woodland creature can be trained to become a Lesser Spellcasting Partner (LSP) that will serve as a wizard's faithful companion, that not only don't demand any sacrifices beyond needing to be fed and cared for the same as any other familiar, but are also _far_ more thorough than any demonic imp when it comes to helping to write and proofread newly designed spells. Plus they do so much more quickly! But they don't do nearly as much of the work _for_ you so Imps Are The Future!

Worse, some wizards have started turning to lesser imps that don't require a continuous connection to the underworld or regular sacrifices, but they still require _far_ more mana than other familiars, _and_ they're worse at their jobs!

@SuperDicq what is a toot about a repo going live instructing people to configure that repo, if not a promotion