Every time you raid them to rescue a woman being sex trafficked:
"Thank you Mario but our princess is in another rented luxury villa."
Please stop calling them the Tates. They've officially changed their brand to the Super Smash Brothers
The experts lost their sense of smell from COVID

"Current and former EPA scientists said that threat level is unheard of. It is a million times higher than what the agency usually considers acceptable for new chemicals and six times worse than the risk of lung cancer from a lifetime of smoking."
https://www.theguardian.com/environment/2023/aug/04/epa-boat-fuel-cancer-risk-chevron-mississippi
Am I crazy or did they write that entire article without once telling the reader what the ingredient is?
Literally no mention of a product name or its chemical formula
Also big thanks to nostr:npub1d0npefkxtfkcptjdawvwkfu58japhjfaljt4hqtpq2xqn8pt2nwqdjahqw for finding this issue and reporting it!
I don't know if anyone has published the PDF publicly but it's probably the nicest security audit paper that anyone has done for the Fediverse
nostr:npub1yck44z5zqxmwpqzqs75ay6ffjdw843ng9p6mz0lzfff3fgz2djlsngujmw nostr:npub108pv4cg5ag52nq082kd5leu9ffrn2gdg6g4xdwatn73y36uzplmq9uyev6 nostr:npub12haw8lqt6g57r8zk9vc7w32cezuu2d5tcqpsarquntgfl5n0wrjq8nxxk6 >> to implement a bunch of features nobody wants.
>upwork
Let it be known that a lot of these unwanted features (themes, HTML parsing, yous, flash support) were done by me and for free. Either before pornlord era or after it. Pornlord era mostly consisted of awful shit like lets change the urls, lets get rid of filenames, lets migrate to mastoapi, let's implement chats, lets implement stories etc.
Users do know what they want and the use what you think "no one is using", meanwhile your approach usually was let's do what nobody asked for for sake of people who might or might not exist.
> lets implement stories
Pixelfed should be ashamed I know right?
yeah I suppose if anyone thinks they've been attacked they should change their SECRET_KEY_BASE
is it making racist fedi posts yet? something about white bread being the only pure bread?
well we do support NetBSD... 💩
Pleroma is full of security vulnerabilities because OnlyFans paid people on Upwork to implement a bunch of features nobody wants.
Have you ever tried downloading an emoji pack from a server? No? Well that's the vulnerable code.
Anyway, hopefully everyone is using s3 for uploads by now and has the dedupe filter enabled.
Patch is being merged into Rebased now: https://gitlab.com/soapbox-pub/rebased/-/merge_requests/263
A patch was ready yesterday but I figured I'd wait til after it landed upstream first.
nostr:note1ch09jq7ywc26h8jdprrd3k67ufllqy7fm5t3qd2lxeud9kvtrwnsc7p442
also Elixir is memory/thread safe, so no it's not "full of vulnerabilities".
also I don't know why you're so upset about Upwork. We had a roadmap and goals for the project and not enough manpower. People on Upwork knew Elixir. We brought them onto the project. They did some *really* great work.
Ivan / i1t is possibly one of the smartest devs I've ever seen.
Roman and Alex were fucking great too.
These people are better Elixir devs than you or me.

nostr:npub108pv4cg5ag52nq082kd5leu9ffrn2gdg6g4xdwatn73y36uzplmq9uyev6 Wait... Is OF based on Pleroma?
OF was actually a competitor to MFC Social (by the same investor), and OF exploded in popularity so it didn't make sense to run both projects simultaneously.
Pleroma is full of security vulnerabilities because OnlyFans paid people on Upwork to implement a bunch of features nobody wants.
Have you ever tried downloading an emoji pack from a server? No? Well that's the vulnerable code.
Anyway, hopefully everyone is using s3 for uploads by now and has the dedupe filter enabled.
Patch is being merged into Rebased now: https://gitlab.com/soapbox-pub/rebased/-/merge_requests/263
A patch was ready yesterday but I figured I'd wait til after it landed upstream first.
nostr:note1ch09jq7ywc26h8jdprrd3k67ufllqy7fm5t3qd2lxeud9kvtrwnsc7p442
> to implement a bunch of features nobody wants.
come on man, that's not fair. When federated instance emojis were first happening people wanted an easy way to download entire emoji packs from other servers. Don't rewrite history.
Lots of times users request features that nobody ever uses. That's the problem with having users. They always think they know what they want.
If you are trans in the USA and afraid of being doxxed you have the option of using the same tools the rich use to protect their identity/assets in their various business dealings: anonymous LLCs
Use them.
Just upgraded to #Caddy 2.7.2 on FreshBSD.org. It didn't last very long:
Successfully started Caddy (pid=15076) - Caddy is running in the background
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x30 pc=0x907c10]
Looks like it's HTTP/3 related, which I've disabled for now: https://github.com/caddyserver/caddy/issues/5680
Imagine inventing a programming language in 2009 and it still does this sort of thing...
ooof thanks for sharing, I deploy Caddy for HTTP/3 which is useful for $job and I roll my own builds with some plugins so I haven't jumped to 2.7 yet
To prevent people from stalking you / your business, essentially. Help you to not get doxxed
Oh, in 2017 they reduced some of the anonymity of Wyoming LLCs! I was not aware of this
https://www.harmony.law/wyoming-removes-the-cloak-of-anonymity-for-shell-companies
re-replying just because the last one didn't address the main point, just listed the other good benefits of Wyoming LLCs
4 states offer anonymous/private LLCs:
- Wyoming
- Nevada
- New Mexico
- Delaware
Wyoming is most tax friendly. "A Wyoming LLC is anonymous if you want it to be. Wyoming does not require members or managers be listed, only the registered agent and person who files the paperwork." -- so you can pay a registered agent to register it on your behalf, and your name is not associated with the LLC. (Registered Agents are everywhere, they do this for tons of people and companies that need someone to manage their LLCs)
Nevada is most expensive to be registered in, so I'd avoid it.
New Mexico is: "the only state that does not require disclosure of the ownership of an anonymous LLC to the state, which means your business can expect the strongest privacy and confidentiality." But I don't believe you can register an LLC in New Mexico without being a citizen? Checking...
Delaware. "We're in... Delaware." - Wayne's World

