Show newer

Meanwhile it instills a lot of (unjustified) fear of package registries into a lot of developers, even though the "security issue" essentially boils down to "someone let their dog crap in the community garden" and the attack vector doesn't scale to anything that people actually use

Show thread

i just think it would be cool if we had academic conferences on the fedi, where we finally dispense with the notion that there is anything intrinsically meaningful about journal publication and see how uh it actually might be a very healthy thing to have our work in a continually moderated social space where we can directly talk about the work on the work itself rather than isolated in journal clubs, disconnected threads, and closed, one-time, gladiatorial peer-review with binary outcome.

have an idea? cool, drag and drop your notebook into the text editor, give it some metadata, get a PID, tag your colleagues, peer review is an ongoing conversation, and so on.

someone wants to ask a neuroscientist a question? cool, come on over to our instance, we have a forum mode where you can browse through prior discussions by topic, start your own, and idk we as academics actually start making all this information we use public money to gather available to people in a medium where they actually are.

just #neuromatchstodon #ScholComm things.

Show thread

"Hundreds of malicious packages [so obscure that almost noone installed them] found on <package registry>" really is the new way for security companies to score some cheap PR, huh

Its like a coordinated DDOS PR attack from these existential risk people and they're succeeding in making me constantly talk about them.

Uptime of Theseus: if you individually restart all components of a high availability cluster, is the cluster really up since the beginning?

Remember, there’s nothing wrong with saying “Have the day you deserve.”

I had a very interesting convo with an older non-tech person about centralized vs. decentralized social media because I told them one of my interests was independent social media when they asked.

They brought up BlueSky and asked my opinion, which I gave, and then they asked me specifically about the challenge of moderation and safety in the decentralized space.

From there, we had an extended convo about those issues, with me using my history with PV, the lessons I learned, and how I'm applying them to my projects.

It's the first time in a while someone interrogated my thoughts who wasn't involved in the tech industry, so I used it as an opportunity to practice explaining with as little tech speak as possible.

In the end, they were impressed with my context of the challenges of decentralized social media because I made it easy to understand, so they felt like they could make a contribution to the convo despite not having my technical background.

We didn't agree on everything but found common ground because we understood the core of the problem.

It was very encouraging.

I kind of wonder who writes Lidl's manuals, because they're really quite good, and sometimes straight-up include several pages of theory behind how and why a certain tool works

also I would like to once again praise the concept of Bad Gamer Jail

if some heuristic thinks you're likely to give other people a shitty experience if they play with you, you are placed into sessions with other shitty experience causing players

if the heuristic is correct, people who aren't ruining the fun get matched with other people who aren't ruining the fun

and if it's wrong, the worst thing that can happen is exactly what would happen if the system wasn't in place

new update from nintendo: they responded to kotaku's reach out for comment on them C&Ding dolphin from steam

they said, and i quote: "This emulator illegally circumvents Nintendo’s protection measures and runs illegal copies of games. Using illegal emulators or illegal copies of games harms development and ultimately stifles innovation"

anyways nintendo continues to think all emulators are illegal, keep pirating their shit

tech people grumble 

Another day, another person thoughtlessly using JS as a punching bag in a conversation where it was completely unnecessary and irrelevant

ableism 

I wish more people would realize that the whole "nobody has any attention span anymore, just look at Tiktok" thing is ableist rhetoric. It's extremely closely related to the (false) claims of "overdiagnosis" and "epidemic" of ADHD.

It's also something that has been claimed for generation after generation, every time something more visual and/or accessible came into existence.

mastodon meta 

is there good documentation anywhere about what mastodon's privacy and blocking options actually do, both as a user and as a admin? like, the interactions between AUTHORIZED_FETCH and domain blocking is kinda complicated, and i don't even know how user-level domain blocking differs from admin-level defederation of a domain, if at all. thinking about trying to write this if it doesn't already exist.

When the joke isn't worth the time someone put into making it, yet here I am sharing it, so maybe it was ...

Wie du in 30 Tagen deinen Summer Body bekommst:

Du wartest 30 Tage. Es ist Sommer. Jetzt ist dein Body ein Summer Body.

this notbird.site honeypot is so fucking shady. and not just "scammer" shady

honeypot in january before the incredibly fake "scammer" ad: https://web.archive.org/web/20230129064638/https://notbird.site/

honeypot today with the ad: https://web.archive.org/web/20230529131515/https://notbird.site/

Show thread

Also, other artists (and especially those who hyperfocus) will hopefully know the horror of realising that, after 3 hours of work, only now I press save, and THEN REALISE I'VE BEEN WORKING WITHOUT HAVING SAVED A SINGLE THING.

It's all fine now. I've saved.

However!

Show older
Pixietown

Small server part of the pixie.town infrastructure. Registration is closed.