tallship

Okay, have just submitted a PR to a fediverse project to fix a critical security vulnerability; CVE score is like 9.9/10.

More news once administrators of this servers using this project can upgrade safely.

Update: CVE was in @pixelfed, and the advisory is published here: https://github.com/pixelfed/pixelfed/security/advisories/GHSA-gccq-h3xj-jgvf

🚨 Pixelfed admins: please update ASAP to v0.11.11

More information will be published on Feb 25 to give admins time to update.

https://github.com/pixelfed/pixelfed/security/advisories/GHSA-gccq-h3xj-jgvf

#pixelfed #security #release

Reprinted from the Fediverse-City Matrix room, with permission from the author (myself):

I was just participating in another discussion elsewhere on the connotations and perceptions relating to a global feed of the entire known Fediverse, as it pertains to what various platforms call it (in their selector tabs).

Lots of suggestions, and every platform uses a different nomenclature. Some use 'global', some use 'live', and there's a few others as well that try to convey that type of extremely busy feed.

But then I touched on the subject of Local feeds - not all Fediverse platforms utilize this type of concatenated feed. I related that the Hometown fork of mastopub was [at least one of] the first to incorporate this as both a feed, and a type of post that is localized to only that particular instance.

I also, because I've read his contention, included the Dev's reasoning on having such a utility as a feature - because he intended Hometown to be a Fediverse platform that could encourage a Highly localized "community".

So you can select the other various, common types of scope for a post when making a post, as well as posting something that is only viewable to other users on your local instance - thereby supporting the 'local community only' aspect that has eluded and mostly deluded users on other platforms.

Why "deluded", because having a Fediverse account in the minds of most folks coming from the deprecated, monolithic silo space is something that has been heavily promoted by Fedizens as one of the reasons why it's better to use the Fediverse instead of those impersonal deprecated silo systems.

And that's simply not true.

Take me, for example. I have several accounts and interact using them with different circles of people (I won't get into the power of recursive circles as they were implemented in gplus). So I'mma just use mastodon.social, one of the biggest monolithic-like silo instances in the Fediverse, as an example here.

People there, most often n00bs from the November Rain or later) talk about the sense of "community" they have there, when they're really only speaking of the connections they have by following and being followed by not just people on that instance, but across the entire Fediverse.

The sense of community that almost everyone in the Fediverse perceives is mostly a compilation of the follows and followers that they each have, and is unique to themselves alone.

For example, I prolly know 4 or 5 people on each instance I have an account on. My community is comprised almost entirely of the direct connections I have made with others across the Fediverse at large, and yes, people on platforms with 'local-only' feeds to see my posts, know them to be local, but so do folks on other instances watching their 'global feeds' (or home feeds where someone they follow includes a follow of my account).

So to me, in my experience, my community is comprised of those who I've made connections with and the people they are connected to, with very little traffic from the local instance I am on at any given time.

To think that you're going to have a community on mastodon.social consisting of people primarily from that instance is a bit naive, IMO, coz your default feed grows exponentially with foreign user's posts the more you connect with anyone - not just the people you follow that are local to your instance. You see something, you interact because it's interesting, pertinent, or relevant to you - you don't do that because you've discerned that you will only interact with local accounts... that just ain't natural, human tendency.

So the creator of the Hometown fork realized that one type of vehicle in the feature set to mark this kind of delineation was that of the ability to post and see in your feed, local only posts, with the overt assertion that Hometown is a fork that in part, is a platform that can facilitate the social diaspora consisting of a 'mostly local' community.

Even entire instances, named or stated as localized geographically or topically, as having publicly open registrations miss this mark in a big way - people for whatever reason, want a Fediverse account, pick a host/instance, by whatever criteria, and then inadvertently end up creating their own diaspora of social connections across the entire Fediverse anyway.

nostr, Bluesky (when it eventually fully supports other instances), Threads (yeah, I know, it's a bastard, lolz), Minds, and other, bigger instances or monoliths, don't try to capitalize on this notion of "Your instance is your community" because overwhelmingly, it just isn't the case in reality.

I'm not saying that there aren't Fediverse instances are successful in cultivating small communities consisting of connections with others on those particular instances, but the most successful of those are the instances that have actually disabled Federation on those instances, lolz.... There's lots of examples of that, which is kewl - to each their own.

But the tendency of everyone to follow the Ew! Shiny! paradigm of simply liking and following what you like irrespective of whether it's on your local instance or not is the lions share of how people interact with each other.

Your thoughts, observations?

Attached graphic attrib: A Jack Russell, happy as can be, sitting in the pilot's seat flying a Cessna, not knowing WTF he's doing.... but he's really happy! The caption reads: "I have no idea what I'm doing".

#tallship #FOSS #Fediverse #social_networks #community #local_communities #global_communities #connections #follows #followers

⛵️

.

About twenty five years ago, we laid out the keels for a new adventure - The Twin Brigantine project, in the parking lot of the #Los_Angeles_Maritime_Institute, next to the #Los_Angeles_Maritime_Museum, in the old ferry building that was, along with a pontoon bridge, obviated by completion of the #Vincent_Thomas_Bridge connecting the mainland to #Terminal_Island.

Up until that time, #LAMI operated and sailed the 70' gaff-rigged topsail schooner, Swift of Ipswitch (previously James Cagney's personal yacht) for it's youth sailing program. It took a few years to complete the Irving and Exy Johnson, sister Brigantine vessels built and outfitted by dozens of volunteers over the duration of the program. At some point, another gaff-rigged schooner was borrowed and enlisted, the136' Bill of Rights filling the need for accommodations of a youth sailing program that had greatly expanded over time, with many ups and downs, achievements and disappointments, but building two square rigger tall ships for and by a non-profit organization dedicated to youth educational programs for the community, a truly novel pursuit, eventually came to a close as a great success.

This photo shows the 113' brigantine Irving Johnson, on 23 March 2005, and which, after less than three years of service, she had run hard aground on a sandbar following several storms that affected local charts, leaving them partially obsolete - in short, on her way into the Channel Islands harbor, well... sadly, the pic speaks for itself.

Another year and two million dollars later to repair structural damages and flooding, the #Irving_Johnson once again joined her sister ship, #Exy_Johnson, in the pursuit of education as #school_ships, something that Irving and his wife Exy (Electa), following no less than 7 circumnavigations together, pioneered and championed in the 20th century aboard their three successive sailing ships - a #schooner, a #brigantine, and a #ketch - each named the #Yankee.

#tallship #youth_sailing #education

⛵

.

This image or file is a work of a United States Coast Guard service personnel or employee, taken or made as part of that person's official duties. As a work of the U.S. federal government, the image or file is in the public domain (17 U.S.C. § 101 and § 105, USCG main privacy policy)

I saw this movie a long, long, time ago - one time.

Frankenstein - The True Story, with #James_Mason, #Jane_Seymour (long before she was "Dr. Quinn, Medicine Woman", lolz), #Michael_Sarrazin (as the creature), #David_McCallum, #Nicola_Pagett, #Agnes_Moorehead, and #Leonard_Whiting as the titular character. An all-star cast.

I've always intended on seeing it again, because IMO it's the best rendition of #Mary_Shelley's 1818 classic I've had the pleasure of seeing. The character development alone leaves all of the other adaptations in the dust, along with a large dose of empathy for those involved.

https://invidious.fdn.fr/watch?v=g2XYMB771bg

As a companion, I recommend the #Project_Gutenberg version of Shelley's gothic novel in prose; I personally prefer .epub but both the film and the original work by Shelley are more closely aligned than any of those old #Boris_Karloff horror genre flicks that, in turn, influenced the creation of the beloved television character, #Herman_Munster (an old film professor of mine would freak out in the lecture hall anytime someone raised their hand and referred to any motion picture as a flick, lolz).

In a major departure from Shelley's original, Mason's portrayal of the character Dr. Polidori isn't actually in the book - the real John Polidori was a friend of Shelley's who himself arguably launched the #vampire_genre with his 1819 short story, "The Vampyre", once erroneously attributed to Lord Byron. Discussions between Polidori and Mary's husband Percy Shelley are largely credited with the genesis of the Frankenstein story.

If you happen to watch, Frankenstein - The True Story, do please comment back to let me know what you thought :)

My favorite line from the movie, that I've often regularly recited over the years, is:

Beautiful Victor... Beautiful.

On rare occasion, I'm sometimes asked what I'm referencing when I say that, like, after a successful compile, or fresh OS installation :p

#tallship #English_literature #literature #science_fiction #horror_genre @youronlyone

.

Don't trust those "little buddy heaters" and their cousins of having CO2 sensors and low #Oxygen cutoffs that their marketing indicates you can bank your life on.

You can fucking die.

I used a few of these for several years, when I lived completely off-grid, in the mountain wilderness far from the nearest humans.

They're really convenient and quick to heat a small area, or anything close to them, in just a few minutes, and you can pick them up at any Target, Walmart, Big 5, Tractor Supply, Etc., for $40 - $50.

Basically, you warm your environment, sitting on your cot and warming up your feet and toes before turning it off and burrowing into your subarctic bedding. You can leave the pilot going all night so all you need to do is twist and click it on on the morning, but seriously, why bother?

Sharp (and more importantly, observant) girl in the video - although there's no way to be sure, she just may have saved the lives of everyone in that fricken' tent.

https://invidious.fdn.fr/shorts/kaSwF2jru3A?si=u8a0HRKlqPxb_A8T&local=true

#tallship #asphyxiation #camping_safety #CO #Carbon_dioxide

⛵

.

"I knowed his ma. They was good folks. He was full a hell, sure, like a good boy oughta be…He done a bad thing an’ they hurt ‘im, caught ‘im an’ hurt him so he was mad, an’ the nex’ bad thing he done was mad, an’ they hurt ‘im again. An’ purty soon he was mean-mad."

- J.S., who really just wanted to be a fucking marine biologist, as evidenced in his conributions to Between the Pacific Tides, by his friend Ed Ricketts, yet much to his chagrin was relegated to authorship in depression era grit fiction, notable for his brutally honest naturalism, social commentary on extreme hardship, heartache, and subsequently immortalized in pen and celluloid.

Now you fucking know, bitches.

#tallship #lit #history #memoriam and #heroes, both celebrated and vilified; yet still one of my all time great inspirations as an artist. But just who was it he invoked that was so injuriously transfigured?

Can you haz #Cheezburgerz? 🍔 Can you? I doubt it. lemme know :p

photo credit: Hanna Shandra - https://presentacionesjhm.blogspot.com/2016/11/flabellina-iodinea.html - My confidence in your inability to grasp this is epic. Prove me wrong.

⛵

.

Well this is a really fucked up #Rug_Pull!

At the time, I searched and searched and could not find any #FOSS solutions to achieve what I figure most everyone who must use #MFA / #2FA needs, namely:

A Linux desktop version
An Android version (F-Droid or .APK - not from the Google playstore
A Windows desktop version

Does anyone have suggestions as to how to achieve this, so that it syncs between all of your devices?

There are plenty (even FOSS versions) out there, but none of them that I know of that sync between all of your devices. If you lose your phone... oh well! But with Twillio you could just install it on a new phone and it would sync over all of your accounts from one of your other devices, laptop, whatev. I know it's proprietary, and that's a bad thing, but like I said, I couldn't find a single FOSS solution that had this very basic functionality of syncing between all of your devices.

Do you know of an authenticator that syncs between all of your devices? Feel free to boost and ask around, people shouldn't have to carry a phone around with them everywhere, let alone use a phone for your multi-factor authentication when your working on your desktop, and using your desktop/laptop to authenticate/signon to your accounts. That's just ridiculous.

https://www.theverge.com/2024/1/8/24030477/authy-desktop-app-shutting-down

We only have 7 months to migrate to an alternative solution. The Desktop version goes EOL and then dark in August.

If you have any suggestions, please do let me know

#tallship #Twillio #authenticator

⛵

.

Yes, use the #mkinitrd_command_generator.sh script or run #huge, and nowadays it's #eliloconfig instead of /sbin/lilo nowadays ;)

https://claudiomiranda.wordpress.com/2022/08/31/a-new-beastie-and-an-old-slacker-epilogue/

Pro Tip: for a lightning fast #SlackPkg you can point your mirrors to a local store after setting up a cronjob for mirror-slackware-current.sh

I prefer to make use of /etc/slackpkg/blacklist and upgrade my kernels separately, since I often do custom compiled kernels anyway.

#tallship #Slackware h/t to @claudiom for the article \m/

⛵

.

I'm seeing an awful lot of Threads sourced nuggets espousing the virtues of, along with optimism surrounding, the #Fediverse lately.

This seems a bit sus to me, like a concerted outreach effort on the part of Meta/Faceplant and a few other largish, commercial actors to popularize their ulterior motives of domination by... Ahem, normalizing the concepts of #DeSoc and more specifically, the ActivityPub powered spaces in the Fediverse.

I actually dunno who MDBHD or John Oliver are, but I'm certain that they're no Oprah, although it would be nice if she would weigh in on the critical mass achieved to date in the adoption of Fediverse technologies that are #FOSS based, and #Privacy respecting.

To date, *Privacy has been of primary consideration and motivation in the development community surrounding the #ActivityPub powered platforms in the Fediverse, but the questionable players entering from the horizontally scaling decentralized social networking industry have, as of late, been overwhelmingly of the deprecated, privacy disrespecting, monolithic silo persuasion. These monolithic-ally inclined companies hailing from vertically thinking companies are an expected, yet suspect group of *privacy mining experts, sophomorically (sic) wading into the deep end of a demographic consisting mostly of privacy minded* individuals and notable developers of the FOSS based portions of the software world.

<tangent> These industrial surveillance engines are already back on their heels as they venture into what many warn as an #EEE incursion - but truth be told, already too late to the game to subjugate, assimilate us: #Diaspora #ZOT #nostr #Nomad #Matrix #TOR #Yggdrasil #I2P #IPFS / #IPNS and others, including blockchain based so-called #Web3 solutions with baked in privacy considerations at the protocol layer are being *Bridged to interoperate with each other and ActivityPub in the Fediverse at rates which the purveyors of industrial surveillance machinery must invariably only describe as "alarming rates" - that's good news for the average schmoes of the world like you and I. </tangent>

So why are we, just in the past few weeks, seeing so much attention given to the Fediverse by these #juggernauts, perhaps #dreadnoughts, that for so long have exhibited such great restraint and avoidance of the mere utterance of Fediverse, ActivityPub, or even alluding to the notions of Decentralization? There's certainly a particular spin in their delivery, leveraging third parties that obfuscate their participation in the dissemination of their, Great News.

Speaking of Dreadnoughts, just how was it that the great Bismarck was taken out? Remember? The outgunned and outmatched Royal Navy took out her port rudder! ⛵ 💥

It was the end of an era. A rudder post. The Bismarck was doomed to circle her watery grave.

But I digress...

Make no mistake, obscuring the lines between the privacy respecting FOSS based camps that have historically steered the direction of DeSoc has taken, and the deprecated, proprietary silo companies which have based their entire existence upon advertising and industrial surveillance models that I refer to as The Sunnyvale Syndrome family of data mining engines, is now seeping through the cracks of a clear delineation between these two prinicples - that of uncompromising privacy and open source development and that of proprietary, closed source subjugation methodologies leveraging **YOU as the product in inventory*.

Feel free to boost and share your comments at length here. A million people other than myself are here in the Fediverse and are really interested in just what kind of impact the introduction of these traditionally privacy raiding Industrialists will have upon their... scratch that, our future online safety.

tl;dr: Your very private, personal medical history and data (and that of your minor children, in violation of FERPA regulations) is being wholesaled and auctioned off by the so-called "Big-Tech" entrants and hopefuls that are at this very time knocking on the front door of the ActivityPub portions of Fediverse... Tread lightly, and consider how your every move going forward affects the unwitting consent to farm and sell your most confidential personal information.

it is up to you - it is your choice to affirm or deny - whether industrial surveillance is your birthright to embrace or your nemesis to destroy... You, We, have that power to decide.

#tallship #Privacy #Sunnyvale_Syndrome #meta #HIPAA #PHI #FERPA h/t to: @liaizon

⛵

.

RT: https://social.wake.st/users/liaizon/statuses/111714899199909225

We've been discussing these issues, amongst others lately in the Fediverse-City room on Matrix, what with the relative demise of Meetup.com following its acquisition by WeWork, and the rise of *events over at Faceplant further obviating them having much to do with a plethora of event management projects exploding onto the scene for the past couple of years.

It's been a while since I've visited #Faceplant, so long in fact, I only recently became aware a couple of years ago that they had a marketplace that has largely supplanted craigslist, and finding out just today that they in fact have some sort of events system - that speaks volumes, I think, toward my dedication to dogfooding my #FOSS and simply ignoring, for the most part, there are still some privacy disrespecting operators in the deprecated monolithic silo space of social networking.

#Mobilizon, #Hubzilla, #Rebased, and #Friendica have their own take on how these event management systems should #Federate through the rest of the #Fediverse, while others mentioned in the article below, including #WordPress try to fit into that niche in a cooperative, interoperable way... and it's paying off. Bigtime.

It's a good read, events are powerful for hobbyists, technologists, sports enthusiasts, and just about any kind of IRL or remote attendance awareness and organizing; so it only stands to reason that #DeSoc, and social networking in general include the capabilities to seamlessly propagate events as globally possible.

At the very least, events are heralded as one of the best ways to get free pizza 🍕 and beer 🍺 with others that have common interests. After a veritable shitload of funding from many sources, including NGI0 and even larger corporate sponsors, we're approaching a place where anyone with a Fediverse account, even on the smolweb or most obscure platforms like Threads, will be privy to things like announcements, RSVP, alerts, Etc., of upcoming events, regardless of whether your Fediverse platform of choice directly supports event management.

And it is perhaps a little ironic, that #Threads users themselves will likely have at their disposal, an event notification and management capability in direct conflict with the one that Meta wants them to use - I dunno how that's going to work out, but I think it's pretty kewl that nobody else does either at this time.

#tallship #Fediverse_City #NGI0 h/t to @silverpill for the heads up on the following article, he just always seems to know where that rabbit is hiding in the tophat and pulls it right out when it's most needed, lolz.

⛵

.

RT: https://event-federation.eu/2023/12/20/it-is-all-about-the-community/

Last call for nominations everyone....
https://bigbrotherawards.de/nominieren

#tallship #CCC #BigBrotherAward

Christmas is a time of renewal and brand new things... Here's #Melanie with another "brand new key" with tidings of great joy for us all, sharing and spreading the #Christmas cheer. 🎅🎄☃️

https://invidious.fdn.fr/watch?v=mlAtdvCygcE&si=ntMQbyGEWWtCz5mg&local=true

#tallship #Peace_on_Earth #Love 💗

⛵

.

Be kind, not because of who you might meet, but just because you can.

#tallship

⛵

.

ALT

82 years ago today, 2,335 American servicemen and women were murdered in a terrorist attack at Pearl Harbor, Hawaii.

The response completely obliterated the government responsible for that cowardly act, an unconditional surrender of the enemy, heralding in a new age of peace, friendship, and trust between the adversaries who came to embrace their mutual interests, rather than their differences.

Today's children have a lot to learn from that as they idolize terrorists.

#tallship #war

⛵

.

ALT

With the great strides achieved by the #FOSS Champion #Nextcloud, it has been increasingly obvious that #ownCloud needed an exit strategy of its own...

https://owncloud.com/news/owncloud-becomes-part-of-kiteworks/

#tallship

⛵

.

Because there really isn't.

And remember... Ding dong the wicked bitch is dead!

God bless you all and remember not to take what you have or the people that love you for granted.

No alt image description necessary, just listen to the wisdom that Dorothy shared with us all, and set aside some time this coming week to give thanks for all the things you and yours have been blessed with.

#tallship #Thanksgiving #no_place_like_home

⛵

.

Uh, Oh! We've Ratcheted up to a threat now on Adblock and UblockOrigin...

Soft landings usually mean it doesn't hurt very much at first, then perhaps the event becomes more frequent and escalates to something that looks like the attached screenie...

When this happens, you may wish to avail yourself of some of the alternatives below.

Once you get here you're faced with trying options or even becoming disenfranchised. Switching to another browser is a prudent test, some have suggested pasting links into Incognito Mode tabs or logging out, while others have claimed that stock Brave Browser seems to humming along for them; and third party utils from among the list that follows:

#### Web based:

- Invidious
- Piped

#### Android (both are available at F-Droid):

- LibreTube
- NewPipe

#### Desktop:

- FreeTube ( Linux | UNIX | Windows):

#### Browser extension (a native, local, cross-platform solution):

- AdNauseam
This last option is a simple browser extension that is apparently quite popular with folks, levying its own ethical pressure upon those who would force-feed you with data mined ad generation. The README file has some great information on the methodology incorporated.

On #Android, I haven't been presented with any of these foreboding pop ups warning me about blockers. I typically use #Brave or #Vivaldi Browser, they're stock, but I use the YouTube app more than I do any one of my browsers on my phones.

I also run the #DuckDuckGo "App Tracking Protection service". This is NOT #FOSS, so your choices are either installing from the #Aurora or Google Playstore, yet there's no requirement to use the #DDG browser to enable this protection - it's not for your browsers though (even DDG), it is designed to work with pretty much everything on your Android EXCEPT browsers; i.e., almost all of your installed apps, seamlessly, and since most folks stream YouTube videos through the Google YouTube Android app, I surmise that it targets and obliterates ads in the app (I haven't confirmed the veracity of that, it's merely supposition, but it blocks zillions of attempts by installed apps to phone home).

I'm Looking forward to hearing your thoughts, personal observations, and concerns; other toolsets or applications that meet your needs, and why you may have chosen those particular types of tools.

I hope that helps!

#tallship

.