Skip Navigation

troed

@ troed @fedia.io

Posts
8
Comments
328
Joined
3 yr. ago

HW/FW security researcher & Demoscene elder.

I started having arguments online back on Fidonet and Usenet. I'm too tired to care now.

  • A new security fund opens up to help protect the fediverse

    Jump

  • If you know of other ActivityPub servers that expose private posts the same way I suggest you make a responsible disclosure to the developers.

    I don't know of any, but you claim they exist so ...

  • A new security fund opens up to help protect the fediverse

    Jump

  • You have absolutely no idea what "responsible" in "responsible disclosure" means :) It's completely irrelevant how Mastodon has implemented private posts when it comes to how Dansup handled the issue, knowing what the effects were.

    You don't, when told of a vulnerability, handle it in a way that cause harm if it can be avoided.

  • A new security fund opens up to help protect the fediverse

    Jump

  • Read more, post less. I've said nothing about any spec violation. That's not relevant.

  • A new security fund opens up to help protect the fediverse

    Jump

  • A new security fund opens up to help protect the fediverse

    Jump

  • It has everything to do with ActivityPub since if you follow that protocol strictly you will cause this behavior. It still doesn't change that Dansup was told that this caused Bad Things(tm) and yet he didn't follow normal procedure in how you handle it.

    Vulnerabilities don't need to be buffer overflows.

    /cybersec researcher

  • A new security fund opens up to help protect the fediverse

    Jump

  • Regardless whether you want to pretend that not caring about Mastodon is a valid defense when implementing software using the ActivityPub protocol, that still doesn't change anything regarding how Dansup handled the disclosure of the effects it had.

  • Removed

    Tesla suffers worst quarter since 2022 as deliveries tumble

    Jump

  • In Sweden a single Volkswagen EV model (ID.7) now sells as much as all the Tesla models together.

  • China plans world’s first fusion-fission power plant

    Jump

  • In the sense that it does use more of the fuel, like a breeder reactor, that's good. We need to stop claiming 95% good fuel to be "waste" that needs to be stored for a long time and instead just use it all up.

  • Deleted

    Permanently Deleted

    Jump

  • I don't get it. They're 17. They're not kids. Wikipedia tells me the age of consent in the US varies from 13 to 17 (depending on age difference and if it's a person in authority) which is actually partly lower than in Sweden (15).

    You seem to willingly uphold something you actually don't believe in, even when just asked for your opinion. Why?

  • Deleted

    Permanently Deleted

    Jump

  • Why is it up to you whether they have sex or not? Aren't they their own individuals? What's the age of consent where you reside?

    (I'm Swedish and your views sound completely unhinged coming from my cultural background)

  • do you hate AI generated art? why?

    Jump

  • Don't know about "art", but I use it sometimes to generate contextual imagery for blog posts and videos. I would've never hired an artist so the only real difference is that it looks a lot better than when I used to try to draw something myself.

  • Pixelfed leaks private posts from other Fediverse instances - fiona fokus

    Jump

  • Yes, necessarily.

    Importantly, your Mastodon or GoToSocial instance isn’t handing your private posts to any random server, just because it asks. The problem only becomes apparent when you have at least one legit accepted follower from a Pixelfed server

  • Pixelfed leaks private posts from other Fediverse instances - fiona fokus

    Jump

  • The private account would still need to accept a follower from that rogue instance.

  • Don Bacon says Russia, China likely saw war plans group chat

    Jump

  • If they indeed used personal phones of regular consumer brands then ... yeah, I assume zero day exploits would indeed have been used to gain persistent access. It's at least in the realm of the possible.

  • Internet forums are disappearing because now everything is Reddit and Discord. And that's worrying.

    Jump

  • You might have a very different definition of "average Discord user" than the average Discord user.

  • Internet forums are disappearing because now everything is Reddit and Discord. And that's worrying.

    Jump

  • Matrix is a decentralized platform with the same level of security/encryption as Signal. Being decentralized you can run your own server, and chat with others on other servers.

    It supports groups, voice, streams etc - similar to Discord/Slack/Teams etc.

    Open source. Multiple different server and client implementations. Mobile platforms, "all" operating systems, and with bridges so you can have your IRC, Telegram, Slack, FB Messenger etc channels go to your Matrix account/server.

  • Internet forums are disappearing because now everything is Reddit and Discord. And that's worrying.

    Jump

  • Internet forums are disappearing because now everything is Reddit and Discord. And that's worrying.

    Jump

  • How large is large? A few hundreds? Not seeing any performance issues.

  • Internet forums are disappearing because now everything is Reddit and Discord. And that's worrying.

    Jump

  • Telegram is not a secure messenger.

    Yes to multiple platforms, groups etc.