Notices by Rich Felker (dalias@hachyderm.io)

@polotek @EverydayMoggie I think it's a poorly done retrofit to fix exposure of reporting users to harassment & abuse.

What used to happen, and what happens at protocol level, is identity of reporting user gets forwarded. They replaced that field with a dummy admin identity without clearly marking it as dummy.

Because folks were reporting nazis on nazi instances, and the nazi instance owners would tell everyone to go gang up on the folka reporting them.

@EverydayMoggie @polotek Yeah, when reports are forwarded, the identity of the reporting user is protected because the instance the report is forwarded to might be malicious. All you see is which instance it came from. One of the many ways instances function as "privacy unions".

@EUCommission 🤡 🤡 🤡

Hot take: It's hypocritical to be upset that Jia Tan can execute arbitrary code on your machine, but not upset that Google or Microsoft or Apple or Mozilla or Valve or anyone else with non-disableable phone-home auto updaters can do the same.

@intentionwebdesign Nobody needs to be "getting into people's inboxes" 🤮

Yes this shit Google is doing is a problem - for recipients who can't get actual personal mail or automated reports they actually *want to get*. Blocking small businesses from spamming is not a problem.

@kranzkrone @aral I find this at least ahistorical. The term "user" predates big web/SV, and comes from a standpoint of designing things to be useful to/used by someone to meet their needs.

@Mer__edith How does it end up being battery-destroying? Shouldn't it just be waiting on a socket that has no data until there's a notification to be processed, with the TCP keepalive set on the socket options so kernel rather than userspace deals with stupid NATs that would otherwise drop it?

@craignicol @thatprivacyguy "Does anyone object to the ads themselves?"

Yes, absolutely. They're manipulative and exploitative and socially and sometimes physically harmful. They rob our attention. They interrupt our concentration and enjoyment of things.

All of this is small compared to the malice of adtech, tracking, profiling, targeting, driveby malware, etc. But ads are a social ill to begin with.

@bishop "Do not debate moderation actions in public toots" sounds like a very abusive policy. Perhaps I should move the (project) account I have on Fosstodon off of it...

@RemcoBoerma @DeltaWye @bishop It's right there on server rules. Across with a requirement to cw "controversial" stuff which is an inherently racist policy. https://fosstodon.org/about

@Obdurodon Why I just want the whole hellsite to burn.

@lispi314 @Obdurodon What I mean is that there's an obvious need (from how many people use it) for something functionally like Reddit, but that Reddit fills the functional need precludes displacement and lets an utterly toxic culture thrive. Yes that's repeatable, but I think much less likely in a federated scheme.

@aral The way I like to think about this stuff is as a type system, where HTML and text are different types that can't just be mixed haphazardly.

@aral What is the empty lang attribute there for? Should be perfectly valid and equivalent without it, no?

@tqbf Except it's not. DNSSEC is doing great. Adoption keeps going up, civilized countries are mandating DNSSEC+DANE for domains of businesses interacting with gov.

This narrative you've got about DNSSEC vitality is pretty much the same as the media's narrative about Mastodon - completely counterfactual.

@tqbf @TunnelJanitor It absolutely still makes sense! Offline signing is one of the best properties, and key to using DNSSEC right. The problem is garbage domain hosting services with their awful panels rather than an "upload zone as text file" button making it hard for normal folks to benefit from offline signing.

@tqbf @TunnelJanitor Well for what it's worth, I exclusively use offline signing for my domains. This lets me outsource the actual DNS hosting to anyone I want (or a low-trust VPS of my own) without worrying they can forge certs for my domains, etc.

@Mer__edith @aral @Tutanota OK, but can you clarify why the options are "stay" and "walk" rather than "comply" and "ignore the ridiculous demands of a hostile totalitarian regime and help people find proxies" like you did for Iran and Russia?