A Misskey instance owner noticed a potential attacking program. They implemented an invite system for registration, thus they disabled the original built-in API. Then the owner noticed an abnormal pattern in Cloudflare log, where someone:
1. fetch /api/notes/featured to get trending posts
2. get those people's profile image (whose toot was listed in step 1's response)
3. invoke the register API 5 times in a roll
Those attackers share the same pattern across different IPs. And they noticed that they have some new users with random names and lacking proper usage patterns, and might be registered by those programs.
@freemo Although that attack is against MissKey, do we have a similar problem? Just want to let you know :)
What If a Supernova Hits Earth?
by Kurzgesagt – In a Nutshell
https://www.youtube.com/watch?v=q4DF3j4saCE
@beckiedot 有一种「放弃救人情节,尊重他人命运」的佛系心里😂
@beckiedot 害,跟他们扯那个淡呢,爱咋咋地吧(10年网龄如是说)
真的,以前我也爱摆事实讲道理,现在别人说2+2=5我都说是对的。我用中文已经完全没什么表达欲了。
Sp I wrote a pretty lengthy blog post entitled:
# Eugen Rochko, CEO of Mastodon, Found to Support Nazi's Agenda
Sadly I wish it was clickbait.
You can all read it here:
https://jeffreyfreeman.me/eugen-rochko-ceo-of-mastodon-found-to-support-nazis-agenda/
It is the pinnacle of the recent drama. I will also be sharing it on twitter, linking the joinmastodon account there. I tried to include most of the evidence in the article. Hopefully this will have some positive result
Maybe I'll try to set it up. It's still on my system.
I want things to be not complicated.
I mean, the extension system is a good one, the purpose is to prevent browser from over-packing features and let user to install extension if they want something extra.
I tried some well developed web applications and extensions before. Those are really pleasant to use. With bad designed ones? You have to infer what's going wrong in code and avoid operations that will trigger the error. (I'm not a web development so I don't know what's going wrong exactly, I could only infer based on my limited experience).
The browser definitely need a way to load resources on request. Like if the website don't need to connect my wallet, why the wallet extension still running?
IMO, the browser works like the jvm for Java, where it serves the application by offering a standard interface. For java, they have a committee that release new standards every several months and let the vendor to implement the jvm, the one who actually run the program. Now we have oracle, openjdk, IBM, aluz, all different jvms that have their own special abilities.
I think it will be great if we have a standard yet open interface for browsers. So vendor like Google, Mozilla, Apple and others can do their own job while not screw up their users.
Not yet. I'm still a Windows person becuase I use laptop, with Nvidia graphics card and a oversimplified bios from razer. Some linux distro just refused to boot.
Meanwhile, somewhere in a computer science textbook ... https://www.reddit.com/r/linuxmemes/comments/z2b185/in_a_computer_science_textbook/ #Linux
And yes, I don't change most of the default settings. So I use gnome and it looks prettier than KDE by default, although I see people configured their KDE looks much better.
About five years ago, I configured KDE and other things too. But it also locks me into my current setup, which, if they stop maintaining or make breaking changes (give my tray icons bar back, gnome), or the settings I relied on are removed, I will be doomed. (And I will never upgrade to windows 11 because I can't put the taskbar vertically on the left of my screen unless MS gives me a 16:10 monitor to compensate for the space usage).
完了,我以后看这个,脑子扭不过来了……
RT @MrStevenCree:
Blew my mind.
Tried Vivaldi, the browser.
It seems like a super powerful browser with a fully customizable UI and integrated mail client, and calendar things. If I were a businessman or something, you get me, I would definitely like it because I don't need google calendar and Microsoft exchange and any other annoying things, I just need a powerful broswer.
But sadly I'm not that kind of person. I want a simple yet good enough browser where I can install the ad-blocker and call it a day. Frankly speaking, Chrome and Firefox give a pretty simple solution, which they don't offer too many options, but also not too few (I mean, safari).
Why it's so hard. I just want to browse the internet.
I would just stick with firefox for now and see what's gonna happen after mid-2023, when the manifest v2 is deprecated.
@inference I would say no for security reasons. You never know who gonna abuse those unnoticed bugs.
洼地虽然是洼地,但是大家可能也不用过于悲观。网络平台上,尤其是最热门的网络平台上的民意,因为政府的信息污染,会让人觉得大多数中国人价值观很扭曲。但我觉得,真实情况可能不那么坏。
我一般都看网易的体育新闻网页,体育观众可以说是最典中典的老中了,顺直男,普遍的教育水平不高。体育新闻因为不属于敏感领域,所以评论被阉割和控制的相对最轻。但是体育涉及到国家和民族等宏大概念,所以和政治又有千丝万缕的关联。关于谷爱凌国籍,抵制卡塔尔办赛,伊朗球员拒唱国歌的新闻下面的评论,我都翻看过,点赞最高的帖子,都是价值取向正常的评论,比如:
‘伊朗男足虽然输了,但他们支持本国女性的行为值得尊重。’
‘伊朗人值得赢得自由也必将赢得自由!’
在下面留言直接开喷的,都会被人又怼回去,反驳这些喷子的言论,也会收到很多点赞。包括上帝之鹰,兔主席这类人的评论区,在还没有精选之前,点赞最高的都是价值观正面的评论。
所以,大家不要被信息污染造成的泡沫给骗了,或许这就是政府故意制造出来的无力感,使得沉默的大多数,因为感到孤立无援,而怯于行动。
I2P release 2.0.0 enables our new UDP transport SSU2: https://geti2p.net/en/blog/post/2022/11/21/2.0.0-Release
Read more about SSU2: https://geti2p.net/en/blog/post/2022/10/11/SSU2-Transport
By combining industry-standard encryption with the best features of UDP protocols WireGuard and QUIC, together with the censorship resistance features of our TCP protocol "NTCP2". SSU2 may be one of the most secure transport protocols ever designed. #I2P
I2P release 2.0.0 enables the new UDP transport SSU2: https://geti2p.net/en/blog/post/2022/11/21/2.0.0-Release
Read more about SSU2: https://geti2p.net/en/blog/post/2022/10/11/SSU2-Transport
I2P 2.0.0 is released for in-network updates. Other packaging coming soon.
https://twitter.com/i2p/status/1595050908966346754?s=20&t=Nfi1zJD8qyK7jHpcMpeFaw
what?
Abandoned since this instance is broken. Please follow my new account: @skyblond