szescstopni @szescstopni@social.cleverlibre.org

Ciekawe ilu tytanów umysłu się dało nabrać.

Dnes je mezinárodní den bezpečného internetu.

Prosím, všechno vyrvěte ze zásuvky, vyjměte baterie, a utíkejte rychle do nejbližšího lesa!

Safelinks are a fragile foundation for publishing
https://shkspr.mobi/blog/2024/02/safelinks-are-a-fragile-foundation-for-publishing/

Microsoft loves you and wants to protect you. So every time you receive an email with a link in it, Microsoft Outlook helpfully rewrites it so that it goes through their "safelinks" system.

Safelinks allow your administrator, or someone at Microsoft, to stop you visiting a link which is malicious or suspicious. Rather than going to example.com, your link now goes to safelinks.protection.outlook.com/?url=example.com.

Hurrah! If you accidentally click on a naughty link you won't cause chaos and ructions.

Except, there's a tiny problem. People like to copy and paste links that they receive. Someone sends an email which says "here's the link to that report you asked for" which then gets copied into a document or a web page.

For example, I was reading this official document from the UK's Department of Health and Social Care. Slap bang in the middle is a link to another report:

That forces everyone who visits that link to go through Microsoft's proxy. That might protect users if a link later becomes suspicious. But, more likely, it will be used in analytics to further profile users who click on links. It also undermines a user's ability to see the final destination of a link unless they can manually URl-decode content in their head.

It appears that every large organisation which uses Microsoft is prone to this failure. Lots of UK Government departments publish content with safelinks:

The US Military too:

It's all over Twitter:

And there are hundreds of academic works infested:

Look, I get why people do this. They copy a link from an email, paste it in, click it, and it works. No one writes raw HTML by hand, nor should they have to. Our WYSIWYG tools work really well and hide all the mumbo-jumbo. Copy editors look at text; not hypertext. It's only nerds like me who hover over a link before clicking on it.

Perhaps I should stop worrying? Perhaps it is OK that Microsoft intercepts the clicks from people all around the world? Perhaps they can competently run a proxy which detects and blocks inappropriate content? Perhaps they won't ever abuse that facility?

Here's my prediction. In the next five or so years, Microsoft is going to accidentally shut off *.safelinks.protection.outlook.com and a million copy-and-pasted links across the web are going to break.

Think I'm over-reacting? A decade ago, Microsoft got rid of their MS Tag product and, shortly after, all their proxy links were shut off. Similarly, other proxies like McAfee have shut down with little warning.

Or maybe Microsoft's sub-domains will be hijacked?

Either way, if you work in digital publishing, please make sure that your links point directly to the content that you want; not to Microsoft's safelinks service.

https://shkspr.mobi/blog/2024/02/safelinks-are-a-fragile-foundation-for-publishing/

#microsoft #privacy #web

Yeah, I mean, with a mask you'd look like FOOL in public. So I totally understand the Apple goggles users on the bus.

@pecet paanie, prawdziwa historia z serwerowni w Polsce: Kumpel (już emeryt) dostał kiedyś w zimie telefon od IBM w nocy, że serwerowi jest zimno ;DDD Się okazało, że jeden cfaniak chodził palić do piwnico-serwerowni i zapomniał zamknąć lufcik w zimie. Potem się 10 lat śmiali, że serwery go podkablowały.

My mom bought a lot of cauliflower heads because they were on sale and she put them all in the basement cuz it's cold, but because I guess she didn't find a lot of cauliflower sized spaces, they're just kind of everywhere, on top of shelves, next to some books, on a table, etc... today she told me to get all the cauliflowers and take them up but she didn't tell me where she put them all, so I'm in the basement with a box looking for cauliflower on every bookshelf, table, floor, behind things, just making sure I didn't miss anything, and I'm like "years of playing hidden object puzzles really prepared me for this"

how it started, how it's going

Trouble sleeping?
Try writing software documentation. 😴 😴 😴 😴😴 😴 😴 😴
Time for a 🛌

GeoJPG v2 launch on target for March 19 - maybe sooner.

Make your own custom maps, host them for free on Google Drive, view them offline and see your geolocation.

No ads. No tracking. No signup. No cost.

I am developing this as a public service and part of my way to "pay it forward". Plus I am having a blast doing this since - to the best of my knowledge - this is a new approach to offline maps.

#PWA #ProgressiveWebApp #WebApp #Leaflet #OSM #OpenTopoMap #Maps #Mapping #GIS

Ten post kieruję nie tylko do redakcji @niebezpiecznik, ale też do innych polskich redakcji, którzy są sceptyczni co do fediwersum.

https://blog.oliwierjaszczyszyn.com/niebezpieczniku-fediwersum-to-najlepsze-antidotum-w-swiecie-social-mediow

Man. I make a comment about how left-handers often get ignored in product design and a reply guy accuses me of not acknowledging all the truly horrible suffering in the world.

#ThatsGonnaEarnYouABlock

I asked chatgpt4 to have dalle3 generate "a cross section of a gourmet chocolate with each layer labeled."

https://www.aiweirdness.com/chocolates-labeled/

Y Combinator CEO wishes death to SF supervisors.

"Die slow motherfuckers", says completely normal venture capitalist, having a completely normal day:

District 5 Supervisor Dean Preston, whom Tan has pledged $50,000 to unseat through a "Dump Dean"...
https://jwz.org/b/ykLj

a CEO can never be held accountable therefore a CEO must never make a management decision

I was waiting for this Hairy Woodpecker to leave, before I went out to re-fill the feeder.

But then a second one arrived, then a third.

How many are there, in the trees immediately nearby?!

Ooof. "down for everyone or just me" is reporting that fonts.googleapis.com is, in fact, down. No wonder half the sites I'm trying to access are stalling. I thought it was a problem with this public wifi network I'm on...

https://downforeveryoneorjustme.com/fonts.googleapis.com

#MykhailoRohoza

No, this photo is not #Ukraine

This Is Chechnya in 1999, the capital #Grozny was destroyed by the Russia. But 3 years earlier, Russia signed a peace treaty with #Chechnya

They had lost the war and needed a pause, only to go back and kill up to 300,000 #Chechens, 25% of the entire small, proud nation that wanted freedom

This is how peace talks with #Russia always end. That's why #Ukraine does not want them until they leave our land

That's why we're asking for guns ⏩

Postanowiłam pojechać do stronia śląskiego, o! Połączenie kolejami dolnośląskimi... ale zaraz zaraz, ZKA? Czemu? No to zaczynam szukać informacji na ten temat, znajduję info że ZKA za pociągi które jeszcze nie jeżdżą, ale mają wrócić, dzisiaj poszłam zobaczyć jak wyglądają tory. Życzę im powodzenia w renowacji 😝 ale w pełni wspieram ideę!

#KolejeDolnoslaskie