 Are you using Gravatar? (boost for reach) Anonymous poll
Poll
Yes
235
0%
No
194
0%
Never heard of it
0 people voted. 115
0%
Voting ended 12 Aug 2023 at 1:26. 22 comments
 @thomasfuchs i would, but it's too tied to my email address and i don't want to have to give my same email address to every service i use @thomasfuchs “Yes, but only because I used it once a decade ago, forgot about it, and now I’m pleasantly surprised when it pops up.”  @thomasfuchs I run my own static Libravatar node powered entirely by Nginx config files and a thousand PNG files generated ahead of time. @thomasfuchs it’s always a nice surprise when I sign up for something and see my face pop up without having to add it. That said I’ve started using iCloud Hide My Email for everything I sign up for now so its usefulness is waning.  @thomasfuchs I could never get over the creepiness of websites sharing my email with them and them being able to connect my identity with the gravitar powerd forums I visited and used. @timthelion they don’t share your email, just a md5 digest of it, so at least if you don’t have an account with Gravatar it should be private  @thomasfuchs @timthelion That is interesting considering the recent controversy over the .NET “Moq” library sending hashes of developers’ email addresses to the cloud. It’s no longer private when someone has a database to do hash -> email lookups. @bk1e @thomasfuchs It gets worse when according to wikipedia the hashes are right in the urls and therefore PUBLICLY available. And it's md5, which is far from secure... @timthelion @bk1e The whole point of the service is opt-in zero-configuration avatars for services and apps. Note that these are non-reversible hashes of email addresses you’re talking about, not state secrets. ¯\_(ツ)_/¯ @thomasfuchs @timthelion I’m not saying Gravatar is bad. I think using Gravatar as an example helps explain part of the Moq thing. The hash is not directly reversible, but if you add emails, hashed emails, and other user-correlated data (like avatars or open source sponsorship info) to a database, you can look up the other data by hashed email. @thomasfuchs I set it up a decade ago and forgot about it until I'm randomly see an old picture of me on a site I sign up on  @thomasfuchs Using or just miscellaneously have set up somewhere and am reminded of its existence once in a blue moon when I touch an Automatic product? @thomasfuchs that's still a thing? I think I created one like ten years ago but had no use for it, so I voted no here on a technicality @thomasfuchs Yes, for Lobsters, because spinning up a job system and independent vm to process images securely is such a large task. |
Gregory's Server
@thomasfuchs