Gregory's Server
Merely name, address and SSN of everybody.
https://9to5mac.com/2024/08/13/massive-data-leak-national-public-data/
|
I have adhd and am like a kid in a candy store when it comes to free time and time mis-management (see new projects, missed deadlines). I am trying to focus on specific tasks and goals, and so I may not respond as fast as I usually do during this experiment. See you in a week, for emergencies, email me. ✌️   If I win this domain auction (in the 4 figures), I'll be so happy It will mean I have the best and shortest domains for all my projects, and this one especially matters Can't wait to share more deets soon 😉 That being said, considering I already own: - pixelfed.com I feel especially lucky! It's rare for fediverse projects to own their .com and github/x usernames  @dansup it's always fun finding good domains. In the early days of the Internet I would buy and sell them. Now they are difficult to find. I did pick up DigDug.org a while back which I will use for my personal Fediverse instances. 2016: dan discover mastodon application developers: [frequently introducing vulnerabilities by choosing the wrong AES mode] NIST: what's up, chat. on today's stream we're gonna cook up a new AES mode! https://www.nist.gov/news-events/events/nist-workshop-requirements-accordion-cipher-mode-2024 @dansup it feels like your being unfairly harsh on Gitlab because (guessing) your next ActivityPub project is going to be a federated code platform.  I apologize for my earlier post regarding Ice Cubes and Pixelfed. I should have verified the claims first, I was wrong and I feel bad for saying I couldn't suggest that app anymore. I've updated the original post and shipped a fix. Going forward, I'm working on some MastoAPI tests to ensure compatibility and will be more careful about what I say. Dillan if you read this, kudos on the amazing app! This is a link to the original post, I didn't want to delete and pretend it never happened because what I said was wrong, and y'all deserve the transparency! @daniebeler The pleasure was all mine, thank you for building an app for our community, looking forward to working together in the future to provide users the best experiences, no matter which app/client they choose! You are proof that the social web works, and even though we are technically competitors (I have a Android app too), how many times you see the incumbent openly list their competitors on their website? The magic of the fediverse is giving control to the people, thank you so much ❤️ A huge thank you to @dansup for adding #Pixelix to the apps section on https://pixelfed.org/mobile-apps ♥️ @daniebeler The pleasure was all mine, thank you for building an app for our community, looking forward to working together in the future to provide users the best experiences, no matter which app/client they choose! You are proof that the social web works, and even though we are technically competitors (I have a Android app too), how many times you see the incumbent openly list their competitors on their website? The magic of the fediverse is giving control to the people, thank you so much ❤️ Pixelfed Portfolios are one of those "silent features" Imagine being able to curate specific posts, along with the layout and background/text colors, on a seperate website with an emphasis on your content. See for yourself: https://portfolio.pixelfed.social/dansup https://portfolio.pixelfed.social/earth https://portfolio.pixelfed.social/lastrodamo
Show previous comments
 Imagine running a @pixelfed server with Curated Onboarding enabled You get a new application, but it looks a bit off. You request more info. This is the response... It's obviously AI generated, and somewhat alarming IMO Spammers are adapting to fediverse projects, and it's up to maintainers like me to make it more difficult for them. it's chess, not checkers fam 💅  @dansup @pixelfed While I agree that the description is suspiciously long and articulated from a Western perspective, I have to say I have regularly been surprised by how articulate and polite written interactions can be with individuals coming from an East African (in English) or West African (in French) cultural background.  @dansup @pixelfed so many red flags in that message 🚩🚩🚩🚩🚩 the tone and content make me think of mainstream, for profit social media… not the philosophy of the Fediverse. So eloquent but then the “growin” at the end sealed the deal for me - like they copied and pasted from an AI system, forgot to include the last letter (“g”) and then slapped a dot at the end 🕵🏻♀️
Show previous comments
 @dansup I hope you're not 'outbid' by bots that just try to hike the price.🧐 
Wow, that's some commitment. I feel like I'm wasting money every time I have to pay like $70 every year for all my domains grr, just let me have this domain!!! (I'm bidding in a domain auction for one of my side projects, and this domain would be iconic) I think a reasonable solution to dealing with spam account mitigation is to build out and embrace user level invites Allowing users to invite their friends and leveraging their "trust score" to apply our Autospam detections accordingly. This would solve the UX issue, while still allowing for strict vetting of new users. What do you think? (Boosts & feedback greatly appreciated)
Show previous comments
It assumes that people will be reasonable and bad actors don’t game the system. Spam is a surprisingly hard problem to solve when using simple rules. @dansup When you reject w/ email, this is the rejection email we send to the Curated Onboarding applicant. You can also request more info instead of rejection, it's a pretty useful feature!  I recently decided to enable Curated Onboarding on pixelfed.social and a majority of the applications are suspicious and most likely spam. I'm brainstorming a few ways we can better handle this without requiring admins to work so hard. We can use simple keyword detections a la bayesian analysis to automate this to a degree, but that requires some training first. While it's unfortunate to have a spam problem, this does indicate some level of success, so I'll take that 😎 |
@j12t Every SSN leak is one step towards the only solution: a recognition that SSN is public data and should have no authentication value.
(e.g. this blog from 2007: https://stage.vambenepe.com/archives/107)
@j12t I love the "everyone's data is gone but be sure not to click on strange links".
Elsewhere : " the ecosystem is dying but be sure to tear the plastic off that sandwich wrapper before putting in the recycling"
@j12t back in the early days of social media, when there were frequent articles about some random person being fired or their job application rejected because the employer found pictures online of them being unruly at a party or engaging in similarly ordinary behavior, I thought we might lose some privacy in that, but that it might also force us to recognize some very common behaviors as common, ordinary, and not worthy of anything resembling punishment.
⤵️