Pixelfed before v0.12.5 has a vulnerability where it could leak your private posts, regardless of whether you are a Pixelfed user or not.
Admins should update ASAP.
When following someone from a different server on the Fediverse, the remote server decides whether you are allowed to do that. This enables features like locked accounts. Due to an implementation mistake, Pixelfed ignores this and allows anyone to follow even private accounts on other servers. If a legitimate user from a Pixelfed instance follows you on your locked account, anyone on that Pixelfed instance can read your private posts.
I wrote a blog post about how I found the vulnerability, how disclosure coordination went and general ramblings about Fediverse safety:
https://fokus.cool/2025/03/25/pixelfed-vulnerability.html
re: fashion, hand sewing, microplastics, plant-based textiles
According to the microplastics review of textiles on https://doi.org/10.1016/j.polymdegradstab.2022.109901 :
> Bio-based cellulosic fibers such as cotton, viscose rayon, Lyocell and non-cellulosic fibers like poly lactic acid (PLA) are biodegradable; thus, they degrade in the environment much faster than synthetic fibers such as polyesterm
There are many other factors that impact how many microplastics you shed (e.g. top-loading washing maschines are ~7x harsher than front-loading). See the article for details.
Viscose (rayon/sabra silk/cactus silk) has the disadvantage of carbon disulfide pollution; lyocell is basically a less impactful way of making viscose. Cotton is an ok natural fibre and it's cheap and comfy, but it's terrible as functional wear due to absorbing way too much water, and the agriculture tends to be intensive, plus some of that distinct cheapness disappears if you try to guarantee it wasn't processed by Uyghur slaves.
Any of these are, in my estimation, much preferable to anything to do with polyester or plastics in general. So my order of preference would be:
local natural fibers (linen, hemp, nettles) > cotton > lyocell > viscose >> polyester/PET/nylon/etc.
cotton is particularly dangerous if wet when the weather is cold, or wet when it's hot and moist. (it can actually be helpful in dry heat). lyocell is probably the best alternative to synthetic sportswear if you don't want to or cannot use linen, for example for sports bras or gym leggings.
oh and 100% plant latex is biodegradable, though the extraction industry can be sketchy. but could be an excellent alternative if you're not allergic and need a tough waterproof layer, traditionally in stuff like motorcycle jackets or rain boots; but it's not breathable at all and I wouldn't like, hike in a latex jacket.
there's no good substitute for outdoor wear that is not made of animals or plastic. rationally speaking the best alternative is to buy used pieces of wool and leather in the aftermarket, so you don't add demand to their terrible industries; but handling the products of animal abuse makes me depressed, and plus if this becomes a thing that lots of people do, the aftermarket becomes part of the demand, too. the most ecological alternative is to move somewhere you don't need to worry about hypothermia that much.
realistically speaking I'll just continue to wear the synthetic outer layers I already have in winter. at least outer layers have to be washed rarely, so the microplastic shedding gets minimised. it's that or getting into oilcloths…
linen has a reputation as a summer fiber but the same properties that make it so great for summer also work fantastic as natural base layers in winter. I've also worn it aesthetically as a second layer over thermal underclothes. I haven't found attempts to make it warm or wind-resistant by doing thick and tight weaves like ventile. the way it's usually sold, it will be fully breathable and quick-drying, but neither wind- nor waterproof. (but notice that the hardcore hikers and backpackers will recommend you to pick quick-drying clothes over trying to achieve full waterproofness. a windproof layer remains important.)
@mcc see: https://tim.dierks.org/2014/05/security-standards-and-name-changes-in.html
> As a part of the horsetrading, we had to make some changes to SSL 3.0 (so it wouldn't look the IETF was just rubberstamping Netscape's protocol), and we had to rename the protocol (for the same reason). And thus was born TLS 1.0 (which was really SSL 3.1). And of course, now, in retrospect, the whole thing looks silly.
really, Amazon...
https://en.wikipedia.org/wiki/OpenSearch
https://en.wikipedia.org/wiki/OpenSearch_(software)
two totally different software projects by the same company under the same name
I think the tax authority legitimately sends me more physical mail than *every other sender combined*
@rail_ The same kind of 'death spirals' exist in the Dutch bureaucracy, too...
CW-boost: intimidatie door politie
Please remember that what you see on social media is what people choose to present, not an accurate representation of their life. Few people post about the horror.
Don't put off seeing friends because "they're having fun" or "they're busy" and "you'll see them later". You do not know that any of these things are true.
@RensBloom I knew the rolling stock situation was dire, but I didn't realize it was *that* dire...
The Super Printendo deserves a place on the fediverse.
Image credit: @jamhamster.bsky.social https://bsky.app/profile/jamhamster.bsky.social/post/3lj3sjr2qa227
EUpol
I might flesh these thoughts out a bit more in a blog post in the near future, but only if I have time. I think leftist commentary on what the EU does is in sad short supply in the last decade+
EUpol
The EU has decided on dealing with necropolitics in multiple ways. Doubling down on the old world order and a (popular! Even on the so called "left") devotion to neocolonialism and white supremacy. The popular narrative you must have seen is that the Moloch of the United States army is retreating from the continent, and so we must "pick up arms" and re-arm to become more ready for the threats of tomorrow. But have you considered what that materially means? What this money is being put to and what effects those things tend to have on societies. The EU is basically claiming that it wants to (at least partially) take over the mantle of world police, pump more money into its own military industrial complex, and grow its power projection globally. But it cannot grow its recruitment easily, most armies in the EU are professional volunteer armies, so unless they want to reinstate the draft I don't see how manpower will increase. So techno gadgets it is I suppose, tools of more destruction, devotion to at best blowing up our own resources. A society funded from the top to incentivize people working on machines of death directly or indirectly. And a huge incentive to go down the road the US has already tread, impoverishment to lead people into the pipeline to work for the military.
UPDATE: there is a blender plugin that fully automates this process
extensions.blender.org/add-ons/ikea-browser/
so it's even easier!
thanks to @schrottkatze for making it aware of this
scraping models from ikea is actually easier than this one expected:
1. open the network tab of the web inspector on the ikea site, set it to media (this is in firefox but it assumes chromium-based things have a simiilar tool)
2. open the page for the product and open the 3d view, then save the result of the request for a glb file that happens when opening the 3d view
3. open in blender
it even imports with textures and materials, properly scaled, and everything
Technical debt collector and general hype-hater. Early 30s, non-binary, ND, poly, relationship anarchist, generally queer.
Sometimes horny on main (behind CW), very much into kink (bondage, freeuse, CNC, and other stuff), and believe it or not, very much a submissive bottom :p
Feel free to flirt, but if you want to actually meet up and/or do something with me, lewd or otherwise, please tell me explicitly or I won't realize :) I'm generally very open to that sort of thing!
Further boundaries: boosts are OK (including for lewd posts), DMs are open. But the devil doesn't need an advocate; I'm not interested in combative arguing in my mentions. I am however happy to explain things in-depth when asked non-combatively.
My spoons are limited, so I may not always have the energy to respond to messages.
Strong views about abolishing oppression, hierarchy, agency, and self-governance - but I also trust people by default and give them room to grow, unless they give me reason not to. That all also applies to technology and how it's built.