query: is there a concrete example of HTTP signature validation that this one can test its code against?
details: this would specify the [signature, public key, string that is signed], and the steps to verify (for example, openssl commands).
context: its ActivityPub implementation considers all incoming activities to be incorrectly signed.
telegram
Can't help but notice that the reason for the Telegram CEO being arrested in France seems to have shifted from "failure to moderate the platform" (in the original reporting) to "failure to hand over user identities to cops" (Telegram updated their T&C to hand over data).
Those are two VERY different things.
“Sometimes they say it’s illegal [for prisoners to unionize], but it’s not. It’s just frowned upon. But it works.”
New today from Michelle Pitcher: Texans are organizing inside and outside of prisons to empower incarcerated workers, who labor in dangerous conditions without pay. https://www.texasobserver.org/solidarity-prison-labor-union/
#politics #prison #WorkersRights #labor #HumanRights #Texas #USpol #news
Listen, this "only useless people wouldn't understand this" crap has kept me in work for a long time, but it still makes me incredibly angry. Folk happily preserving the opportunities for them and their pals like it's just the natural order of things.
To set aside the exclusionary shit and put my educator's hat on for a minute, the primary thing that makes mastodon complicated for people to get started with is not technical or practical, people know how to fill out forms - it's conceptual. Understanding how to choose an instance requires a significant amount of context, together with a clear sense of the implications of that choice. And we haven't done a great job of providing that context in an accessible way, so far anyway.
Okay this is a perfect example of what I was talking about earlier this week. You're building a web browser. One of those most sophisticated pieces of software you can imagine. But meanwhile you bolted this little firebase thing onto it that executes arbitrary code in everybody's tabs. And those folks weren't experienced enough with security practices to understand how potentially dangerous that was.
https://flipboard.com/@theverge/apps-tj3a91j8z/-/a-PE98y0ECTFOOTE0EgUjWSg%3Aa%3A43611565-%2F0
https://flipboard.com/@theverge/apps-tj3a91j8z/-/a-PE98y0ECTFOOTE0EgUjWSg%3Aa%3A43611565-%2F0
Cooking: Throw in a handful of x, a pinch of y, add z to taste, fuck it, just grab whatever leftovers you have in your fridge and use that too, who cares? It will probably be fine anyway.
Baking: You better have a milligram scale on hand because if you add 4 too many particles of x then it will start a violent reaction between y and z wasting 2 kilograms of ingredients! Also your oven will catch on fire and your family will be cursed for the next 7 generations.
If you are using that map of the wormhole network that everyone uses, it might appear that getting from Earth to Procyon involves taking the spur line to Gomiesa, but remember: that map distorts astrometry for two-dimensional comprehensibility. A space-native guide (like me!) will tell you it’s 40 parsecs cheaper to get off at Sirius and blast across N-space to join the Mirzam line via the one-way on-gate at Sirius-B.
I mean, if your patron race is still paying your gate-fares you might not care, but some of us had to evolve ourselves to sentience by remixing our own chromosomes.
tangent, political
The question comes to mind of what role this shift towards egocentric social platforms has played in the political landscape becoming ever more individualistic, pessimistic, and hostile to organizing.
It sure would have been a very effective mass isolation tactic.
some thoughts on fedi more generally, concise
The more I think about the design of social platforms, the more convinced I become that social platforms should not have profiles with timelines at all.
Getting rid of them isn't going to magically bring world peace, and it's not going to solve political issues, but holy shit would it prevent a lot of community failure modes wholesale.
some thoughts on fedi more generally
It's incredibly bad at supporting coherent meta-conversations, and that's not just a problem of the technology.
The model that ActivityPub implementations tend to follow for supporting group interactions, is to let groups emerge organically in an informal manner, as a natural result of the clustering of people who are similarly aligned.
That works really well for a lot of things, but not for conflict resolution *between* those organic groups, whichever they are.
Each group mostly just sees the things posted by 'their' group, and so is very likely to get only half the story of what's going on, if that; and usually through the lens of a member of their group. This means that in a conflict, both parties are operating on a wildly different view of what actually happened.
I'm not sure that you can actually fix this on a technical level, I suspect it's fundamental to this model. If you don't have explicitly defined communities "in" which something happens, there is simply no reliable way to get a complete view of all conversation around a topic within that community. There isn't even a way to convene a meeting to sort things out.
Sure, you have hashtags, and you have group accounts, but all of these are opt-in and so only make discoverable those things which are explicitly posted to them, which is usually only a small fraction of what actually happened, and not the parts that are important to understanding it.
I can't see how *anything* that's built around personal profiles/timelines foremost, would avoid this fate. It seems like a fundamental and far-reaching design error to me, something that practically guarantees unsustainable conflict, no matter how good the moderation tools.
It's also a design choice that basically every social platform since 2010 has made.
Thinking about this because any effort at communicating “this has happened to me” or “this affects me” always starts several steps forward from the moment of direct experience.
When someone tells you a thing, always listen for the effort they have already made to craft language that is accessible to you. The unsaid is still there, fresh from being cut; it’s there in the gap it has left.
When you observe language being passed between others as a third party—the overwhelming experience on social media—remember that language hasn’t been crafted with you in mind.
You are never the expert in someone else’s experience.
Technical debt collector and general hype-hater. Early 30s, non-binary, ND, poly, relationship anarchist, generally queer.
- No alt text (request) = no boost.
- Boosts OK for all boostable posts.
- DMs are open.
- Flirting welcome, but be explicit if you want something out of it!
- The devil doesn't need an advocate; no combative arguing in my mentions.
Sometimes horny on main (behind CW), very much into kink (bondage, freeuse, CNC, and other stuff), and believe it or not, very much a submissive bottom :p
My spoons are limited, so I may not always have the energy to respond to messages.
Strong views about abolishing oppression, hierarchy, agency, and self-governance - but I also trust people by default and give them room to grow, unless they give me reason not to. That all also applies to technology and how it's built.