Notices by Risotto Bias (risottobias@toot.risottobias.org)

@cadey

@soatok if I read this right... a server / home hub in matrix could MITM users,

and possibly(?) a malicious group client could MITM the group?

@soatok a good amount of my own judgement on a company is how they recover from an attack or treat a security researcher.

hostility? not purchasing.

owning up to it with public whitepaper / lessons learned? awesome.

@soatok *grumble grumble* you made me google an RFC before noon

okay, multikey support.

what benefit does this have? is it a dependency for something?

is it easier to contribute to mastodon vs say, lemmy, misskey, gotosocial, peertube, pixelfed, or something else?

@ryanc oooo, what happens if you rotate the router ever so slightly to point differently?

or when you move the router a few feet in either direction

@pq1r @soatok ah, good, nobody voted ugly, so I don't have to pinch anybody's arm. >:3

@benpate @bonfire any plans to publish keys on @soatok's federated key transparency protocol?

@anildash I dispute that "discussing patches over email over a bad mailing list software" are better than having issue templates, kanban boards, automatic reviewers, and browser based contributions & previews...

The former is a recipe to get lost in noise

The later is a collaborative inbox with a definable workflow (like saying pull requests have to pass unit tests, instead of receiving a random patch in a mailing list you must test yourself, by hand)

@whitequark @ireneista I'm actually in favor of the cool things they've done with sigstore at pypi - it was handled better than at GitHub in some respects.

but I like sigstore in general, the teams mean well. I actually attended an event with the people who implemented it. It's like certificate transparency.

@cR0w @GossiTheDog ...then what is?

that sounds super smart. like a mic drop without... substance?

@feld @delta @zeab @cassidy join explicitly mixed age server where kids are welcome, ruin it by being a creep collecting and messaging people individually

That's threat modeling for ya.

Snapchat once had a live map feature, clearly they've never had a creep stalk them.

@zeab @cassidy if @delta adds more moderation features, then maybe.

edit: actually, now that I think about it, DEFINITELY NOT. that would be giving away a minor's email address. it makes DM'ing a minor /way/ too easy.

@delta @zeab @cassidy $50 says a minor uses their real email and a stalker exploits that fact.

the tutorials and docs used to not be very explicit about "use a different email",

in fact there's lots of guides for how to use your existing provider

it's part of the selling point of deltachat that you could use your existing email

does anybody know a good SVG icon artist?

#mastodonart #artist

@benpate @j12t @evan @tchambers I don't necessarily think it should be based on domains. that's a barrier of complexity that signing up for twitter/facebook doesn't have.

make transferring or renaming usernames and transferring posts easier...

@j12t @tchambers @benpate where's the sins documented?

@nuintari @uberbrady "show me the incompatibility" seems to be like a graphics artist with a huge 4k monitor and fiber internet, with 32gb RAM, and 16 cores.

I'll show you the incompatibility.

ordinary human mortals run on ISPs that WILL NEVER upgrade to IPv6, because it's pricey. I've known 3 employees (1 as a personal friend) who explicitly said hell would freeze over first.

So, no, you're absolutely dead wrong.

it will always be incompatible with average users, on cheap ISPs. (or, users)

#rust

@ryanc are there other sample queries for inspiration?

@cwebber "unsure if guile or shitposting"

it's an NP hard problem :D