Show newer

Pixelfed before v0.12.5 has a vulnerability where it could leak your private posts, regardless of whether you are a Pixelfed user or not.
Admins should update ASAP.

When following someone from a different server on the Fediverse, the remote server decides whether you are allowed to do that. This enables features like locked accounts. Due to an implementation mistake, Pixelfed ignores this and allows anyone to follow even private accounts on other servers. If a legitimate user from a Pixelfed instance follows you on your locked account, anyone on that Pixelfed instance can read your private posts.

I wrote a blog post about how I found the vulnerability, how disclosure coordination went and general ramblings about Fediverse safety:
fokus.cool/2025/03/25/pixelfed

#pixelfed #fediverse #activitypub

Show thread

re: fashion, hand sewing, microplastics, plant-based textiles 

According to the microplastics review of textiles on doi.org/10.1016/j.polymdegrads :

> Bio-based cellulosic fibers such as cotton, viscose rayon, Lyocell and non-cellulosic fibers like poly lactic acid (PLA) are biodegradable; thus, they degrade in the environment much faster than synthetic fibers such as polyesterm

There are many other factors that impact how many microplastics you shed (e.g. top-loading washing maschines are ~7x harsher than front-loading). See the article for details.

Viscose (rayon/sabra silk/cactus silk) has the disadvantage of carbon disulfide pollution; lyocell is basically a less impactful way of making viscose. Cotton is an ok natural fibre and it's cheap and comfy, but it's terrible as functional wear due to absorbing way too much water, and the agriculture tends to be intensive, plus some of that distinct cheapness disappears if you try to guarantee it wasn't processed by Uyghur slaves.

Any of these are, in my estimation, much preferable to anything to do with polyester or plastics in general. So my order of preference would be:

local natural fibers (linen, hemp, nettles) > cotton > lyocell > viscose >> polyester/PET/nylon/etc.

cotton is particularly dangerous if wet when the weather is cold, or wet when it's hot and moist. (it can actually be helpful in dry heat). lyocell is probably the best alternative to synthetic sportswear if you don't want to or cannot use linen, for example for sports bras or gym leggings.

oh and 100% plant latex is biodegradable, though the extraction industry can be sketchy. but could be an excellent alternative if you're not allergic and need a tough waterproof layer, traditionally in stuff like motorcycle jackets or rain boots; but it's not breathable at all and I wouldn't like, hike in a latex jacket.

there's no good substitute for outdoor wear that is not made of animals or plastic. rationally speaking the best alternative is to buy used pieces of wool and leather in the aftermarket, so you don't add demand to their terrible industries; but handling the products of animal abuse makes me depressed, and plus if this becomes a thing that lots of people do, the aftermarket becomes part of the demand, too. the most ecological alternative is to move somewhere you don't need to worry about hypothermia that much.

realistically speaking I'll just continue to wear the synthetic outer layers I already have in winter. at least outer layers have to be washed rarely, so the microplastic shedding gets minimised. it's that or getting into oilcloths…

linen has a reputation as a summer fiber but the same properties that make it so great for summer also work fantastic as natural base layers in winter. I've also worn it aesthetically as a second layer over thermal underclothes. I haven't found attempts to make it warm or wind-resistant by doing thick and tight weaves like ventile. the way it's usually sold, it will be fully breathable and quick-drying, but neither wind- nor waterproof. (but notice that the hardcore hikers and backpackers will recommend you to pick quick-drying clothes over trying to achieve full waterproofness. a windproof layer remains important.)

@mcc see: tim.dierks.org/2014/05/securit

> As a part of the horsetrading, we had to make some changes to SSL 3.0 (so it wouldn't look the IETF was just rubberstamping Netscape's protocol), and we had to rename the protocol (for the same reason). And thus was born TLS 1.0 (which was really SSL 3.1). And of course, now, in retrospect, the whole thing looks silly.

really, Amazon...

en.wikipedia.org/wiki/OpenSear

en.wikipedia.org/wiki/OpenSear

two totally different software projects by the same company under the same name

I think the tax authority legitimately sends me more physical mail than *every other sender combined*

Show thread

I am a

taxpayer

And I would like to

receive smaller mountains of physical mail from the tax authority

@rail_ The same kind of 'death spirals' exist in the Dutch bureaucracy, too...

You survive emergencies through mutual aid. Survival bunkers are cool but what you really need is a group of people to work with and plans in place

it doesn't matter how long running out of food takes if ya ain't setting things up to get more

Please remember that what you see on social media is what people choose to present, not an accurate representation of their life. Few people post about the horror.

Don't put off seeing friends because "they're having fun" or "they're busy" and "you'll see them later". You do not know that any of these things are true.

@RensBloom I knew the rolling stock situation was dire, but I didn't realize it was *that* dire...

why is the Fediverse Chick DMing me asking for my opinion about Lockheed Martin pride socks

Het lijkt me dat je sowieso niet naar een land moet gaan waar het reisadvies voor lhbti'ers anders luidt dan voor anderen.

weather is weird today.

the trees were blooming just yesterday and the temperature was 20C.

today it's snowing.

it's bizzare seeing trees with green buds and pink flowers be drenched in snow

For supposedly stabby plants, raspberry plants don't seem to be very stabby - I could handle them with my bare hands just fine?

The Super Printendo deserves a place on the fediverse. :SonicRunning:

Image credit: @jamhamster.bsky.social‬ bsky.app/profile/jamhamster.bs

EUpol 

I might flesh these thoughts out a bit more in a blog post in the near future, but only if I have time. I think leftist commentary on what the EU does is in sad short supply in the last decade+

Show thread

EUpol 

The EU has decided on dealing with necropolitics in multiple ways. Doubling down on the old world order and a (popular! Even on the so called "left") devotion to neocolonialism and white supremacy. The popular narrative you must have seen is that the Moloch of the United States army is retreating from the continent, and so we must "pick up arms" and re-arm to become more ready for the threats of tomorrow. But have you considered what that materially means? What this money is being put to and what effects those things tend to have on societies. The EU is basically claiming that it wants to (at least partially) take over the mantle of world police, pump more money into its own military industrial complex, and grow its power projection globally. But it cannot grow its recruitment easily, most armies in the EU are professional volunteer armies, so unless they want to reinstate the draft I don't see how manpower will increase. So techno gadgets it is I suppose, tools of more destruction, devotion to at best blowing up our own resources. A society funded from the top to incentivize people working on machines of death directly or indirectly. And a huge incentive to go down the road the US has already tread, impoverishment to lead people into the pipeline to work for the military.

UPDATE: there is a blender plugin that fully automates this process

extensions.blender.org/add-ons/ikea-browser/

so it's even easier!

thanks to
@schrottkatze for making it aware of this

Show thread

scraping models from ikea is actually easier than this one expected:

1. open the network tab of the web inspector on the ikea site, set it to media (this is in firefox but it assumes chromium-based things have a simiilar tool)
2. open the page for the product and open the 3d view, then save the result of the request for a glb file that happens when opening the 3d view
3. open in blender
it even imports with textures and materials, properly scaled, and everything

Show older
Pixietown

Small server part of the pixie.town infrastructure. Registration is closed.