@charlotte so uhh, misskey?
why cohost is problematic (long)
Okay, so let's talk about this cohost thing for a bit.
It sounds great on the surface - a small-scale, worker-owned, sustainable social media platform, run by some trusted people! Great, right?
Not so much, unfortunately. If you click through a bit, you'll find that it's run by "anti software software club llc", which claims to be a "non-profit software company". Except that's legally false (LLCs are not non-profit), and practically very unlikely to actually work out like you might think. In reality, it's an unaccountable power structure, and one that is bound to end in disaster.
They're not the *first* to do this - both YourAnonNews and npm (the JS package registry) have a very similar origin story. A small hobby project by some activist-minded people, trusted by the community, incorporated into a for-profit legal form to keep the lights on, promising to always keep serving the community. Of course, there's a reason I'm mentioning them - both of these projects turned into large unaccountable power structures that ended up doing far more harm than good, and significantly damaging a movement.
They scaled up, and whether through naivete or otherwise, the founders were unable to continue acting in the best interest of the community and broader society. Both of them became a blight on their respective communities, actively interfering with the efforts of others in that community to right the ship.
But they'd grown "too big to fail", too big and closed-down to replace or disavow. They ended up *controlling* the community rather than serving it.
A company is not a community. It is hierarchical; it has owners, employees, people with a specific role who decide how it gets run. This makes a worker-owned company a decent option when the decisions being made only affect the workers, as there's good representation.
But... that is not what's going on here! There is *no way* in which a worker-owned company can accurately represent the interests of a community of people *who do not actually work there*. Worker-owned companies are not magical fairy dust that guarantee equity and representation. You need actual community governance structures for that.
So... cohost is problematic. It is a power structure which is prone to abuse (deliberately or otherwise), not accountable to anybody, with no proper community governance model nor any real room in its incorporation form to *create* such a governance model, it is a proprietary and closed system that does not interoperate with other systems, and most worryingly of all it is a platform that becomes more valuable as it grows.
In other words: all the ingredients for a perfect storm of power abuses and harm several years down the line. Whether you personally trust the founders doesn't really change that - it's set up for failure from the very start, even assuming the best intentions.
As an activist community, we really need to do better on this - recognize such problematic power structures *before* they grow big enough to cause widespread harm, and encourage people to select governance models that *don't* suffer from these issues.
yeah user supplied html/css whatever is funky and fresh and also a massive issue in so many ways
cohost
1. create form element with a malicious POST request
2. create label for submit button
3. size label to cover the entire screen or some important ui element (the report button, for example)
4. ???
5. profit
@thufie @pastelpunkbandit hmm not sure if they allow actual <style> elements, or if you can only set the style="" tag on elements
can someone post <div style="position: fixed; top: 0; left: 0; height: 100vh; width: 100vw; background: black; color: white;">bogos binted</div>
lol
@pastelpunkbandit it's hard to tell what is/isn't possible without having an account, but it's not looking good..
@pastelpunkbandit it's also a *massive* security vulnerability. Your post can easily overlap the entire page, overlapping/replacing UI elements etc. Like smh at least iframe your user content
Good morning everyone! As the tail end of our June crowdfunding draws near, we're finishing off with a two day Q&A session, right here!
So starting now, just @ us in any questions you have about the GoToSocial project as it is right now and going forward. We're gonna be extra online to try and answer 'em :)
man for a second i wondered if the "hand yourself in" campaign from Extinction Rebellion wasn't just some small subgroup or psy-op.
but no it's the actual UK original organization that proposed this shit
https://extinctionrebellion.uk/event/xr-red-handed-rebellion/
@pastelpunkbandit i mean yeah, that's the first thing you invest in right :')
@pastelpunkbandit just another silo talking the talk but not walking the walk huh..
⚠️ READ BEFORE FOLLOWING ⚠️
if i don't know you from elsewhere (under same nick), shoot me an introductory DM first (following back is fine)
I do anarchist tech stuff and run free services at https://pixie.town
I program, solder rgb led thingies, and fly fpv quadcopters
en: they/them
nl: die/dies (langzaldieleven.nl)
“i don't trust like that”
not a furry, actually
Extreme coffee-out-of-a-wineglass Energy
something something trans list stop scraping bios
and now a word from our sponsors (screenreader warning it's zalgo)
T̀ͧ̓̑͐̓̍̂̏҉̴̷͚̦̤͙̜̖͙̝͟ợ̵͈̗̮̲̥͕̼̩̭̞̙͉̆ͮͧ̉̒́̑̍̋ͭ̌ͭ̒̉́̕͟ ̐̅̈́ͯ҉̸̴҉̹̟͕̖̠̟̤͕į̸̙̮͓̤̠̘̫̦̥̣̻͚̣̎ͭͯ̋̉͝n̔̄̏̈́̃̇͛̂̋̇̐́͘͝҉͙͔̠͇̖̤̹̭̱̪v̴̴̛̘̠̰̹͚̱͉̳̘̥̞̳̪͈ͥͭ̅ͥͦ̀͛̔̃̃̎͋̋̎͐͌ͪ̚͟͢ͅö́́̎ͬ̔͑̆̃̅̒̿ͪͯ̓͏̞̱̜͍̬̗̹̫̝̪͓͕̳̬̰͘͝kͥ̒ͣͦ̌͛̃͒̀̿ͣͪͤͬ̍ͮ̚̚̕͝҉̹̰̟̰̻̻͍̠̗̳̬̬̬̞̟̹̩͇́͜ẹ̴̡̨̱̹͍̯̱̗̗͍̬̐ͣ̑͑̐̓̈̑ͥ̅́̇̃͒̀̃̂́ ̨̛͖̬͇̣͔̼̥̬̝̥̣̭̝̪͎͈̌̅͆̉̀͘͜ͅẗ́̄͊̌̍̆́̿́̊ͣͮ̅ͥͩ̔̏͏̧̳͎̥͈ͅh̴̴͇̻ͧ̍̐̈͐̎͛́̀̽̃̒̔͢͢ȩ̸̶̶̟̗̮̺̭̥͕̭͎̺̙͎̖͔ͪ̑͛̓̅ͪ̄́ͧ͡ͅ ̡̧͇̤͚̻̬͉͔̥̫̟̙ͮͩ͌̿́̆͋͜h̵̨̭̰͎̭̱͊͒́͒͆̎ͮ̈́̆ͪͧ̚͞î̛̦̞͓͖̭͈̮͔̩͙̱̖̞̳̥̦̩ͭ̂̏͒ͨ̃̿̽̓͑ͫ̕͝͡vͧ͋ͪ̌̂̑́͌̂̒͑ͮ̋̂ͫ̈́҉̹͜͢ȩ̡̖̯̞̺̭̗͔͇̻̤̼͈̙̞͉͙̈ͤ͊ͨ̀̆͆͒̓̄̿ͭ̃̚͜͝͡-̶̪̪̠̝̜̯̜̹̭̯͎͍̲̱͉ͪ̏͒̊ͫ̀̈͘͡m̸̪̘͙̰͚̗̳͕̟̖̿̌͐̔̐̈̽̃ͯ̅͢ͅͅi̸̷̧̛͍̝̦̫̮̤̐͑͗̏ͬn̡̨͆ͩͤͫ̔̈́̈́͊͐̂͛̀̚͞҉̜͍̝̰̱͚̜̹̞̝̞͈d̢̫͕͚͕̥̰̝͆͗́ͨ͑̈́̓͜ ̡̩̜͎̳͎͂̓ͫͭ͐̀͡ȑ̷ͭ̑ͪͭ͋͢͏͕̳̟͜ͅͅe̴͌̅ͣ̾͒̔́̊̔ͭ̅̄̇͏͎͉͈̤̙p̀ͥ̈ͨͩ͛ͥͣ͗̄̈́̚҉̢͔͉͍̹̮͉̺r̵̸̡̩͎̱̟̺̟̞͈̯̯̪̹͂́ͣ̐͑̒̒̀ͧͩ̿ͮ̕͞ě̵̡̱͈̜̯̳͍̝̦̜̫͈̜̗̘̪̪̓͆͑͋ͮͯͪ̅̂͐̔̆̃ͫ͑̾͒͢ͅş̶͓͉͚̜̪̜͓̘̻̃̔ͨ́̀ͅẻ̵͇͈̮̝̠͖͍̫͉͓̪̠͔̬͕͛̊͐̎̓̽ͫ̌ͧ̅̿́͘n̛͚̺͈͍̰͉͙̤̘̺͖͉̤͖̈͑͑̍̅ͪ̎͂́ͦ̒ͣ̋̆̄̄̍̃̊͟t̵̛͙͚̥͇̫̻̞͖͕̰͈̩̰̱͉ͣ̃ͫ̋̍̈ͥ͗̎ͭ͋͜i̵̡̤͇̣̰̦̟̭̮̩̲͔̭̟̖̹̙ͥ̆̋ͫ̓͌̒̾̍̄̾̎̂͂̏̇ͩ̚͢n̶̮̹̤̻͈̙͔͎̦̟ͫ̀͌͛̋̌̽̀̓̂̕g̷̣͖̠̩͈̲̥͍̦̘̺̏̍͛͋̎͛͒ͪ̇ͮ͠͝ ͦ͂́̿͐̅̌̊̌̉̍̀҉҉͈͖̮̩͎̮̬͖c͖̬̠̫̠̫̗̉̾͋͒̏̄̈́ͬ̊̓͘͝h̴̷̨͉͖̱̗̪̣͕̮͓͕̺͖͈͙̥̬͓̟ͣ̏̀͐̀́̍ͪ̋͒͐ͪ͐́̕a͍͈͉͎̥̠͍͛ͭ͛̃ͫ͒͋́͟ö͙̻͔̙͖̰́̋̑́͜s̶̸̫̖̫͇̣̻̺̹͔ͧ͐̂̈́ͮ͋̌͠.̰̯̞͎̗̺̠͔̫͍̖ͮͦ̒̏̈̾ͭͧ̉͘͢͠