Avatar
Alex Gleason
79c2cae114ea28a981e7559b4fe7854a473521a8d22a66bbab9fa248eb820ff6
I create Fediverse software that empowers people online. I'm vegan btw. Note: If you have a question for me, please tag me publicly. This gives the opportunity for others to chime in, and bystanders to learn.

My database sits, broken-hearted. A monolith, but should be sharded.

This is why GPL is good. Everything licensed under MIT is potentially non free as soon as outside code is merged without a CLA. This looks like a CLA alternative.

I preserved their HTTP Signatures code in a cleaned up Deno module. It was very helpful. https://gitlab.com/soapbox-pub/fedisign

Replying to Avatar silverpill

https://github.com/cloudflare/wildebeest

Cloudflare didn't make it

>This project has been archived and is no longer actively maintained or supported

SAD!

It's this: https://gitlab.com/soapbox-pub/soapbox/-/issues/1479

It happens when you navigate away from the home feed and then navigate back after some time.

Just general life advice. Words to live by.

Check yourself before you Shrek yourself.

Replying to Avatar Tassoman

There's some editing of emoji picker.

Reading this mess, I discovered nostr:npub122glfka8k4m5p8g5radee5hmhmh620slp5jyt7fhwvcjs6nd7azq722h6e added support for Calckey who also changed name, but not original Misskey who have 200x more users. I'm disappointed :meow_glare-zoom:

Misskey doesn't have Mastodon API.

Please send me the link to Transbox. I wanna know what they changed.

Watched Oppenheimer, came home, and poured a giant pot of boiling water on a fire ant hill in my backyard. I'm vegan except when you bite my wife.

nostr:npub108pv4cg5ag52nq082kd5leu9ffrn2gdg6g4xdwatn73y36uzplmq9uyev6 nostr:npub1ycnhgr56efxcpvhu7q0er9gqjqttpwhgqgjfgjaj7gpfea5g6xhq4zgshs did you reply to the wrong thread? I don’t know what this has to do with not storing secrets in envvars

Point is it will be secure in other ways. In fact it won't matter if the Ditto server gets pwned. Users keep their own private keys which they use to encrypt events themselves. There's nothing to leak. All you could harm is the server admin, not the users. It will be 10x more secure.

nostr:npub108pv4cg5ag52nq082kd5leu9ffrn2gdg6g4xdwatn73y36uzplmq9uyev6 nostr:npub1ycnhgr56efxcpvhu7q0er9gqjqttpwhgqgjfgjaj7gpfea5g6xhq4zgshs ok, but understand that means all the secrets are effectively on disk at /proc/self/environ. An arbitrary file read (like the two recent Pleroma issues) means full secret disclosure.

I would really recommend against it.

Ditto will only support uploading through s3 and it won't support XML. It will even crash if you try to configure the media domain the same as the root domain.