The new ".zip" domain is being used almost solely for malware. Some of the clicks are very deceptive, even to technically knowledgeable people. See the attached image for an example.
You can block all zip domains with the following uBlock Origin rule:
Tell everyone you know.
"I'm not going to discuss this with you unencrypted," needs to become a normal part of our modern vocabulary.
#andstatus seems to work pretty well with #microblogpub these days. The result of trying to post with "public" checked but "followers" unchecked seems to be "direct," which I think may make sense but was not what I had guessed.
I got quiet for a while, huh? Here's the latest...
I noticed #microblogpub rendered the posts I was replying to with u-comment where I thought it should be u-in-reply-to, so I changed it. Then I realized the reason it was like that to begin with is because the same block is used for rendering replies to me as comments. So I thought about that for a while, and concluded that since the most likely consumer of that markup is something checking to see what I'd said because of a webmention I sent, and therefore it is way more likely that said consumer will see things I am replying to than things that are replying to me, it made sense to leave my change in place until I could do better.
Then I went to commit the change (since I'd made it in production) and while I was at it, I figured out how to make it depend on whether it was part of the thread before or after the post the permalink is for, so I did that instead. So that's what's new around here.
Today marks one month since I got my site/instance set up and made my intro post, and I want to make sure I post something today. (Actually, if I'd posted before I went to bed, I could have hit that one month pretty much on the minute.) However, I am not sure I'm actually going to get any of the things I want to write next fleshed out enough to be ready to post them tonight, so I decided to post a quick list of what I'm planning to work on or write about:
- https://bringback.blog, whether I qualify, and whether I'm participating
- 100days projects, 100DaysToOffload specifically, and whether I'm going to do such a thing
- Terminology quirks between the Fediverse and the Indieweb, and how they and the way
microblog.pubworks make me go "huh"
- Follow-up the first: Why that makes me feel like I need a convenient way to post something that is public, but doesn't hit my followers' timelines
- Follow-up the second: How that means I think I should try to interact with other people who do both Fediverse and Indieweb stuff
- Bonus: Why can't my instance seem to interact with Tantek's fediverse presence? Is it because I'm doing something wrong, and can I fix it?
I think it’s important to repeat: you don't "have something to hide" when you put blinds on your windows or close the door when you're on the can or wear clothes.
Privacy isn't about having something to hide. It's not about keeping secrets. It's about you being the person who chooses what you reveal about yourself, and when, and to who, and the other word we have for that is "dignity". Your inherent dignity, as a human being.
Your privacy is the agency you have over your dignity.
I saved the holidays and stopped the villain! holidayhackchallenge.com Don't miss out on SANS #HolidayHack x @KringleCon https://holidayhackchallenge.com
All right, settled in for the evening...as soon as I finish running some updates, it's time to see how much more of #HolidayHack I can finish. I might have to come back to this fountain thing.
Tweaks to my site in the last couple days:
- My Articles page was already marked up as an h-feed, but because the links to the posts were not marked up as
h-entryit appeared empty. I remedied that and submitted an issue to the dev.
- I added
<link>so that, at least in theory, I can now support old-fashioned pingbacks by having webmention.io forward them to me as webmentions.
- Tracked down why, when I try to start composing a reply and one of the actors in the thread is a profile I can't retrieve (such as because their instance uses a whitelist I'm not on), I get a 500 error; wrapped the offending attempt to add them to the "@" list in a
tryand, for now, just drop them from the list, the same way the instance where my other account lives seems to do it. Submitted an issue for that too. (I might investigate later what happens if I try to leave the @-mention in place even though the lookup failed.)
- Implemented a config toggle (not sure why I bothered to make it a config toggle; maybe I think other people might like it eventually?) to change the object IDs of posts from being a hex representation of a UUID to being a NewBase60-encoded...well, unix timestamp divided by 60, because I wanted resolution to the minute. Why? Because I have a few edge cases I think I might come across eventually in which I want to work around the fact that I can't easily edit my posts by predicting a permalink in advance. I may remove the division by 60 eventually, because I am pretty sure I generate one of those IDs for everything I do, and therefore I now can't post two things within the same minute. That might not sound like a big deal given how long my notes are (no, I can't type this much in under a minute), but the ID in question is also used as the ActivityPub ID of the action, so it applies - I'm pretty sure, and have tested at least one combination - to likes, shares, and so forth as well. By comparison...well, I suppose I might try to like and boost something within the same second, but not often. Anyhow, I'll see how it goes - the other nice thing about it is that as far as I can tell, since the IDs were already just something standing in to be unique, I can switch it up whenever I like and it just affects my posts during the time I have that configuration active. Come to think of it, I should make it configurable whether it uses seconds or minutes. Maybe tomorrow.
So there's just one problem, from my perspective. Which is that before I decided to muck around with all that, I had meant to use this weekend to work on the #holidayhack, because I thought I might actually try to submit my write-up this year...
#AndStatus improves support of #ActivityPub #C2S while working with #microblog.pub team. https://github.com/andstatus/andstatus/issues/561
With apologies to my followers...one disadvantage of this setup, I guess...I've decided it's time to try to test sending and receiving webmentions, using https://webmention.rocks.
Test 1 Test 2 Test 3 Test 4 Test 5 Test 6 Test 7 Test 8 Test 9 Test 10 Test 11 Test 12 Test 13 Test 14 Test 15 Test 16 Test 17 Test 18 Test 19 Test 20 Test 21 Test 22 Test 23
Merry Christmas, folks. Got #AdventOfCyber wrapped today. I've got some stuff I think I want to write up as an article about my site (#Fediverse #IndieWeb) with respect to syndicating and backfeed; I need to run a test and submit a bug report (or possibly a pull request) to #Microblogpub before I forget about it; and I have a book I want to finish soon; but over the next week I hope to make some more serious inroads on #HolidayHackChallenge.
Decided to celebrate getting caught up in #AdventOfCyber by trying to post a note with a #micropub client.
NEW: New York City has just issued an advisory for everyone to wear a mask in public spaces because COVID levels are high in all 5 boroughs.
10 PRINT "Hello World!"
Hi, I'm Bob. AKA 0x3b0b or 3b0b (both of which I also pronounce Bob) since shortly after #defcon in 2021; I use the 㬋 (UTF codepoint 3B0B) ideograph in a lot of places to continue the theme because that's the kind of sense of humor I have. (I haven't found any indication of it being offensive - it apparently means "name of a star" which I think is pretty cool.)
I've been in #softwaredevelopment professionally since 2005. The interest started with a Commodore 64 when my age was in single digits, but I wasn't one of those prodigies writing full-fledged programs as a kid; prior to high school I only dabbled.
I'm a #ttrpg nerd; #discgolf player; #symphonicmetal, #sciencefiction and #fantasy fan; and dabbler in #infosec and #devsecops, as an extension of an interest in #devops acquired as a programmer. I've been meaning to get into #ActivityPub and #IndieWeb for years now and I'm finally getting around to it - I've got an article in the works about why (and why now), and about how I'm setting it up. I look forward to seeing how wrong I manage to get it.
My website is running microblog.pub, which means it can act as a citizen of both the Indieweb and the Fediverse; but I'm running the dev version, and I'm not sure what it can and can't do, so I will be experimenting with how to use it in combination with other services and my Disroot account. While I'm working on that, content may or may not be syndicated, and likes/replies/etc. on syndicated content may or may not be backfed to my site.