Post ATetnwmSSPNpARa1E8 by FatNiggerDykeCunt@poa.st
 (DIR) More posts by FatNiggerDykeCunt@poa.st
 (DIR) Post #ATeF6cFWv3ZIsAxfkm by p@freespeechextremist.com
       2023-03-15T18:31:26.021365Z
       
       51 likes, 37 repeats
       
       :mcafeesmug::hacker_f::hacker_s::hacker_e::alexjonesshock::lazer_m::lazer_e::lazer_e::lazer_t::lazer_s::glowinthedark::hacker_f::hacker_b::hacker_i::threeletteragentglowsobright:Incidentally, socialgist.com, the owner of boardreader.com (which has changed hands a few times), is one of those private companies subcontracted by the feds to deliver things that the feds could not acquire directly without legal encumbrance.  Here are excerpts of mail headers from yesterday morning:> Delivery-date: Tue, 14 Mar 2023 16:46:12 +0000> Received: from mx-east-out-17.fbi.gov ([153.31.119.176] helo=mx-east.fbi.gov)> [...]> X-Attachment-FN: FSE Screen Shot.PNG> [...]> Date: Tue, 14 Mar 2023 16:45:59 +0000The fed declined to answer my question about whether I would be obstructing an active investigation and has failed to respond to my "Look, you didn't answer my question." email.  I am providing some limited information and will be providing more information soon; see below.:alexjonesplaining::mgsgb_t::mgsgb_h::mgsgb_e::mgsgb_d::mgsgb_e::mgsgb_a::mgsgb_l:It doesn't appear to be serious.  They aren't after me; I don't know that they're after anyone.  Nothing to do with drawings or photographs, they asked about a fedpost from someone that isn't even on FSE.  Luckily for me, I have no way of giving them information I don't have, but I am also a paranoid motherfucker.  So if he still doesn't answer the second attempt at asking the question by EOB, then either there is no problem if I disclose whatever, or I'm screwed and I should probably hedge by dumping everything and setting up another dead man switch.That thing I have been saying for years, that they don't understand federation, they see "one site" and think "one site", that they don't understand the network?  That's apparently completely accurate:  they don't understand federation.  They're asking me about some post that arrived on FSE but did not originate here, and when I explained this, they asked for help identifying the origin server.:bigbosspw::mgsgb_f::mgsgb_s::mgsgb_e::relaxer:So, I can answer to the law for how I run FSE:  I have operated this server with an eye towards ensuring that, if FSE causes the cops to care, it will have to be because they have a problem with freedom of speech.  Revolver is designed to fix that:  hosting everywhere means hosting nowhere, and relaying blocks means not relaying posts, so nobody should be liable for propagating blocks across the network (unlike the design of the other tool that has recently become popular, the one that requires propagating full posts between relays and then encourages you to send satoshis for the posts you like; "likes" on fedi can be forced, but the entire point of ).  But until Revolver ships, I've got this problem, so I've gotta keep FSE rolling the way it rolls.  Since I didn't give them any information (because I actually can't), the warrant canary is intact:  https://freespeechextremist.com/notice/ATeCJ0lxGlj0XfLZsO .  I am considering setting up a forwarder so that that bot receives emails sent to FSE's email address, so it can scan for mail from the government and report a count of how many new emails it has seen when it posts.:mgsgb_n::mgsgb_e::mgsgb_x::mgsgb_t::solidsnake::mgsgb_u::mgsgb_p::tyrellshades:There are additional details that will have to wait.As far as registrations and public access to TWKN go, I think the transparency on FSE improves the situation overall:  if there's nothing hidden, then there is no reason to suspect anything shady is going on unless you see something shady going on.  However, if off-site posts are ascribed to FSE and the if the feds are so clueless about fedi that they'll ask me for "subscriber information" for someone that isn't even on FSE (and they don't know how to look at the name of the server after the "@" in the nickname), this presents a problem:  although I can answer for the things I do on FSE, I cannot answer for TWKN.  Given that fact, and given that socialgist.com has continued its scraping attempts, I'm going to keep TWKN locked down and also keep registrations off for the time being.  I hate that, but I don't have any better ideas.:mgsgb_s::mgsgb_u::mgsgb_g::mgsgb_g::mgsgb_e::mgsgb_s::mgsgb_t::mgsgb_i::mgsgb_o::mgsgb_n::mgsgb_s:If anyone on your instance is a habitual fedposter, and you have avoided banning them, you should get rid of them before they cause you a problem.Anyone that is good at analyzing their logfiles to look for signs of heavy scraping, and then to wander over to boardreader.com to see if anything from their site appears when they put their domain in the "domain" field.  I tried a handful of servers and nothing:  I think they're only scraping FSE.If you are *not* good at analyzing your logfiles, and you are worried about scrapers, maybe lock down TWKN for a while.ytcracker--toolin_up--twitch_mix.mp3
       
 (DIR) Post #ATeFOWTl72UcBk9i2S by meso@asbestos.cafe
       2023-03-15T18:34:39.708273Z
       
       10 likes, 5 repeats
       
       @pLjRaeIjoIdX7mg.png
       
 (DIR) Post #ATeFZBg0nO34r9yKPI by sysrq@freespeechextremist.com
       2023-03-15T18:36:35.841852Z
       
       3 likes, 1 repeats
       
       @p :glowing::glowinthedark::threeletteragentglowsobright:
       
 (DIR) Post #ATeFbRaWbkqSmgTvI8 by marine@breastmilk.club
       2023-03-15T18:36:59.770125Z
       
       5 likes, 0 repeats
       
       @p yeah, weirdly enough, when I search breastmilk.club up on boardreader.com, all the “Results” are from FSE.
       
 (DIR) Post #ATeFeXNjWWhDcbyQ0e by icedquinn@blob.cat
       2023-03-15T18:37:29.252217Z
       
       7 likes, 0 repeats
       
       @p >  is one of those private companies subcontracted by the feds to deliver things that the feds could not acquire directly without legal encumbrance.not that i would ever accuse a judge of upholding the law, but isn't that still illegal"the state cannot do indirectly what it is not allowed to do directly" etc
       
 (DIR) Post #ATeFiAerx35uIuimSO by p@freespeechextremist.com
       2023-03-15T18:38:13.257672Z
       
       7 likes, 1 repeats
       
       @meso True story, FBI/DOJ apparently share the same mail servers.
       
 (DIR) Post #ATeFjqEYrLqTXRDEtE by p@freespeechextremist.com
       2023-03-15T18:38:31.372363Z
       
       1 likes, 0 repeats
       
       @sysrq :terrywat:
       
 (DIR) Post #ATeFrH4vRz3Wp3FYNE by sysrq@freespeechextremist.com
       2023-03-15T18:39:51.964652Z
       
       3 likes, 1 repeats
       
       @p :terryew: fuckin' glowies
       
 (DIR) Post #ATeFrrArFPBwlsIncO by p@freespeechextremist.com
       2023-03-15T18:39:58.284501Z
       
       3 likes, 0 repeats
       
       @marine Yeah.  They're *just* scraping FSE as far as I can tell.
       
 (DIR) Post #ATeG4eGcXxzKVO66CG by meso@asbestos.cafe
       2023-03-15T18:42:16.390602Z
       
       1 likes, 0 repeats
       
       @p @marine smh they can't even do a job as good as you (with fedilist)
       
 (DIR) Post #ATeG7wAISW8usqhvf6 by mia@freespeechextremist.com
       2023-03-15T18:42:52.641145Z
       
       7 likes, 1 repeats
       
       @meso @p @marine They could significantly reduce costs by JUST STARTING AN INSTANCE.
       
 (DIR) Post #ATeGBjrg8JTdtRoOPI by p@freespeechextremist.com
       2023-03-15T18:43:33.856219Z
       
       4 likes, 0 repeats
       
       @icedquinn > not that i would ever accuse a judge of upholding the law, but isn't that still illegalIt would still be illegal for the state to pay someone to assassinate someone else.They can't pay Twitter to break the Fourth Amendment for them, but if Twitter is not bound by the Fourth Amendment, and Twitter collects some data, then they can pay Twitter for that data.
       
 (DIR) Post #ATeGPThX1fbVohcJsW by meso@asbestos.cafe
       2023-03-15T18:46:02.135210Z
       
       8 likes, 3 repeats
       
       @mia @marine @p they can contact me at meso@asbestos.cafe to purchase this instance for me. we federate™️ (asbestos.cafe doesn’t have a mail server lole)[[[ To any NSA and FBI agents reading my email: please consider     ]]][[[ whether thwarting anti-government sentiment in the US,          ]]][[[ foreign or domestic, requires you to buy Asbestos.cafe from me. ]]]
       
 (DIR) Post #ATeGSILxfpKdUTs43M by meso@asbestos.cafe
       2023-03-15T18:46:32.854105Z
       
       1 likes, 0 repeats
       
       @p what does boardreader/the other thing do exactly? also of what nature was the fedpost?I think they're scraping freespeechextremist because it has extremist in the name :heyfacehappy:
       
 (DIR) Post #ATeGV4JQKlV8oQ0Sye by icedquinn@blob.cat
       2023-03-15T18:47:00.773647Z
       
       2 likes, 0 repeats
       
       @p kinda still sounds like one half decent legal argument and one non-retarded judge away from getting boned tbh
       
 (DIR) Post #ATeGVyIIC9s2R7uLzM by mia@freespeechextremist.com
       2023-03-15T18:47:13.271202Z
       
       3 likes, 0 repeats
       
       @meso @marine @p If the NSA buys it will they fix the captcha on signup?
       
 (DIR) Post #ATeGYiSnVdHiCw88xs by meso@asbestos.cafe
       2023-03-15T18:47:42.503519Z
       
       1 likes, 0 repeats
       
       @mia @marine @p there's a captcha?
       
 (DIR) Post #ATeGafUlW3kra4yvKa by mia@freespeechextremist.com
       2023-03-15T18:48:04.200946Z
       
       2 likes, 0 repeats
       
       @meso @marine @p Yes, and it's broken, so you can't sign up.
       
 (DIR) Post #ATeGf3jNLn3ju9uQro by meso@asbestos.cafe
       2023-03-15T18:48:49.269279Z
       
       1 likes, 0 repeats
       
       @mia @marine @p cc @dushman hat the hell
       
 (DIR) Post #ATeGqHUCY6TLkeA8qO by meso@asbestos.cafe
       2023-03-15T18:50:50.524045Z
       
       2 likes, 0 repeats
       
       @mia @dushman @marine @p hm, it does seem like it's broken. lemme give you another invite link I disabled it
       
 (DIR) Post #ATeH1lFyCg99GgypVo by p@freespeechextremist.com
       2023-03-15T18:52:57.986771Z
       
       3 likes, 0 repeats
       
       @meso @marine I think they don't even understand that there is a network.FediList's crawler is actually just hacked together and sloppy; I'm astonished that it has kept up with fedi's growth as well as it has.  I thought, "I'll just fire this stuff off and let it do whatever instead of doing some good architecture."  Since then it's just been "Ah, shit, it broke, let's duct-tape it."  It's never really been top of the list, so I've not hacked on it more than an hour at a time.
       
 (DIR) Post #ATeH9jqZKQwrDFu28u by laurel@freespeechextremist.com
       2023-03-15T18:54:24.488422Z
       
       2 likes, 0 repeats
       
       @p >Incidentally, socialgist.com, is one of those private companies subcontracted by the feds to deliver things that the feds could not acquire directly without legal encumbrance. How do you know this, is there a list somewhere? I'd like to know the rest of the companies they use.
       
 (DIR) Post #ATeHAmbwXMs44iYls0 by p@freespeechextremist.com
       2023-03-15T18:54:35.816664Z
       
       3 likes, 0 repeats
       
       @mia @meso @marine If they got how fedi works, yes.
       
 (DIR) Post #ATeHEi1BYURszNErS4 by mia@freespeechextremist.com
       2023-03-15T18:55:18.386180Z
       
       7 likes, 5 repeats
       
       @p @marine @meso Wait, you're saying that the email is FROM HOTMAIL even when I use Google Gmail to see it?!
       
 (DIR) Post #ATeHHE4RM7kEydxfBQ by mia@freespeechextremist.com
       2023-03-15T18:55:45.678586Z
       
       1 likes, 0 repeats
       
       @p @marine @meso Breaking my brain with these novel concepts.
       
 (DIR) Post #ATeHfFnGbLL7GrNzHM by lanodan@queer.hacktivis.me
       2023-03-15T18:59:39.764466Z
       
       2 likes, 0 repeats
       
       @p This kind of garbage makes me glad I'm not in the USA (but of course we still have stupid law enforcement), damn.
       
 (DIR) Post #ATeHk8jsG3fAq583Ye by p@freespeechextremist.com
       2023-03-15T19:00:59.210069Z
       
       8 likes, 1 repeats
       
       @meso boardreader scrapes the shit out of TWKN, basically.  They're on a five-hour delay (maybe takes them that long to index, maybe there's another reason), so if you order the search by time instead of "relevance", it will always say "5 hours ago" at minimum, no matter what you search for.  Their search interface doesn't avoid stopwords, so you can just search for "the", "that", etc.They use residential proxies and Tor.  It does impersonate Firefox/Chrome/Safari/Edge/phone, but does not execute JS.  It always loads the same stuff in the same order like they executed JS *once* and then recorded the requests and built a scraping template from that.  It starts at the top of TWKN and keeps rolling down, presumably until it finds posts that it has seen before.  There's a blog post about it, but it gives almost no information:  https://blog.socialgist.com/understanding-how-we-find-data .
       
 (DIR) Post #ATeHqy6WCE7Dsnyc52 by p@freespeechextremist.com
       2023-03-15T19:02:13.244875Z
       
       8 likes, 2 repeats
       
       @icedquinn I like your optimism.  PRISM demonstrated that they don't have to care if it's legal because there will be no arrests.
       
 (DIR) Post #ATeHvLBALVrAbhEeRs by icedquinn@blob.cat
       2023-03-15T19:02:59.359545Z
       
       1 likes, 0 repeats
       
       @p i refer back to the comment about not accusing judges of upholding the law.
       
 (DIR) Post #ATeI0KUKLHmnubZoiO by p@freespeechextremist.com
       2023-03-15T19:03:54.755724Z
       
       2 likes, 0 repeats
       
       @laurel > How do you know this, is there a list somewhere?Ask again tomorrow.> I'd like to know the rest of the companies they use.I would too.
       
 (DIR) Post #ATeIBbGKJgv97bP0RE by VD15@pl.valkyrie.world
       2023-03-15T19:05:54.900617Z
       
       4 likes, 0 repeats
       
       @mia @meso @marine @p I don’t have email, I use outlook
       
 (DIR) Post #ATeIEET3WUxFIHbyPQ by p@freespeechextremist.com
       2023-03-15T19:06:25.509303Z
       
       9 likes, 1 repeats
       
       @lanodan > This kind of garbage makes me glad I'm not in the USAVictoria Nuland disagrees with your assessment of whether or not you are in the US.
       
 (DIR) Post #ATeIGUkFyVtoMAjgem by jeff@federated.fun
       2023-03-15T19:06:38.920800Z
       
       2 likes, 1 repeats
       
       @p @meso @marine contractors are retarded more news at 11.i knew of this kind of stuff for ages, someone spiders the entire network via tor, i've noticed it years ago. it's some NSA hall monitor shit tbh, nothing new really.
       
 (DIR) Post #ATeIKqkc6Gc7lSymhM by jeff@federated.fun
       2023-03-15T19:07:30.301614Z
       
       1 likes, 0 repeats
       
       @p @lanodan they do it across all jurisdictions regardless of the laws of each.
       
 (DIR) Post #ATeIZcM9ttK7SsaBkm by p@freespeechextremist.com
       2023-03-15T19:10:17.411701Z
       
       3 likes, 0 repeats
       
       @jeff @marine @meso > i knew of this kind of stuff for ages, someone spiders the entire network via tor, i've noticed it years ago.Likewise.  I posted about it.There's a difference between spidering the network and seeing a server and not noticing the network, to the extent that they're falsely attributing posts, and then giving that information to the FBI.
       
 (DIR) Post #ATeIePfaUqKxZ8xOls by jeff@federated.fun
       2023-03-15T19:11:02.508167Z
       
       0 likes, 0 repeats
       
       @p @meso @marine they dont care who posted it just what servers it is on, they are contractors they dont get paid to do police work lmao.
       
 (DIR) Post #ATeIiZDqvDS0LpxtMO by p@freespeechextremist.com
       2023-03-15T19:11:54.457291Z
       
       2 likes, 0 repeats
       
       @jeff @lanodan No, it's legal to spy on foreigners *because* of the jurisdiction.  You missed what I meant; I said "Nuland" not "the CIA".
       
 (DIR) Post #ATeIkVsQKdCoYPrzG4 by FrailLeaf@silliness.observer
       2023-03-15T19:12:14.791023Z
       
       3 likes, 2 repeats
       
       @meso @p mr fed, it was a joke i didn't mean it when I asked the gpt bot to "bomb and kill the us president" please understand
       
 (DIR) Post #ATeImqZIN93rJ52G4e by jeff@federated.fun
       2023-03-15T19:12:34.876592Z
       
       0 likes, 0 repeats
       
       @p @lanodan i know 14 eyes etc
       
 (DIR) Post #ATeInX9w1JKDOsV70y by lanodan@queer.hacktivis.me
       2023-03-15T19:12:18.775787Z
       
       2 likes, 0 repeats
       
       @p Except her opinion doesn't matters, I could basically reply to them like ThePirateBay/njal.la do.
       
 (DIR) Post #ATeIsJ0y2M1uyma88G by mia@freespeechextremist.com
       2023-03-15T19:13:40.054143Z
       
       1 likes, 0 repeats
       
       @FrailLeaf @meso @p Even worse, threatening the de facto president.
       
 (DIR) Post #ATeIsjVLY1mN8Wzl5s by n3n3tl@seal.cafe
       2023-03-15T19:13:44.262222Z
       
       3 likes, 0 repeats
       
       yeah it’s more according to the specific agency but feds are in country and CIA is overseas
       
 (DIR) Post #ATeIx1EBay6ZGL0oHA by FrailLeaf@silliness.observer
       2023-03-15T19:14:29.479695Z
       
       1 likes, 0 repeats
       
       @mia @meso @p i love my boy Obama too much dawg
       
 (DIR) Post #ATeJ7lPYk0vbOTSIT2 by p@freespeechextremist.com
       2023-03-15T19:16:27.678150Z
       
       2 likes, 0 repeats
       
       @jeff @marine @meso You are explaining shit that I know and that, if I didn't know it, I would have found out on the 13th when I spoke to them.I said that what they are doing is different from someone spidering the network, because what they are doing is different from someone spidering the network.
       
 (DIR) Post #ATeJBXcPxoFhm7Grzs by mia@freespeechextremist.com
       2023-03-15T19:17:08.629958Z
       
       1 likes, 1 repeats
       
       @FrailLeaf @meso @p "Barry got a book deal, Donnie.  He got a fucking book deal.  You're just the face for TV, and don't you ever fucking forget it."BN-SY250_FINK04_P_20170412220727-4103028443.jpeg
       
 (DIR) Post #ATeJG1krrMC6OpMXlQ by p@freespeechextremist.com
       2023-03-15T19:17:57.285608Z
       
       2 likes, 0 repeats
       
       @lanodan She's not a cop; her opinion blows up pipelines.
       
 (DIR) Post #ATeJGu39zYucnCKum0 by dcc@annihilation.social
       2023-03-15T19:18:04.783013Z
       
       0 likes, 0 repeats
       
       @p makes sense, this is why i disabled my twkn to the public :look:
       
 (DIR) Post #ATeJI0C2dYQA8R0y3c by mrsaturday@shitposter.club
       2023-03-15T19:18:18.133306Z
       
       1 likes, 0 repeats
       
       @p What instance had the glowpost on it?
       
 (DIR) Post #ATeJJ79GGOCBznFDns by jeff@federated.fun
       2023-03-15T19:18:20.637070Z
       
       3 likes, 2 repeats
       
       @p @meso @marine my desire to deploy a sockpupet network of ai chatbots that emulate the linguistic style fingerprint of high profile politicians but as anime pfp that talk about violent domestic insurrection that talk to another network of ai chatbots that act like uwu egirl streamers, just rose above a critical threshold.
       
 (DIR) Post #ATeJMPtP1sJkzyOx2u by p@freespeechextremist.com
       2023-03-15T19:19:06.566050Z
       
       1 likes, 0 repeats
       
       @n3n3tl @jeff @lanodan She isn't cop or CIA or spy or anything, she's foreign policy:  https://wikispooks.com/wiki/Victoria_Nuland
       
 (DIR) Post #ATeJPstVer9VoZ6ZYu by jeff@federated.fun
       2023-03-15T19:19:36.482041Z
       
       0 likes, 0 repeats
       
       @p @lanodan @n3n3tl yeah a "contractor"
       
 (DIR) Post #ATeJQEnEEtCTjSKrpI by p@freespeechextremist.com
       2023-03-15T19:19:48.000585Z
       
       5 likes, 0 repeats
       
       @FrailLeaf @mia @meso Let's all love Biden! :bidenshades:
       
 (DIR) Post #ATeJSc04vTp8HsThlQ by p@freespeechextremist.com
       2023-03-15T19:20:13.746219Z
       
       1 likes, 0 repeats
       
       @mia @FrailLeaf @meso :finksmug:
       
 (DIR) Post #ATeJVSVMgbQThsTAxs by p@freespeechextremist.com
       2023-03-15T19:20:44.611460Z
       
       2 likes, 0 repeats
       
       @mrsaturday Ask again tomorrow.
       
 (DIR) Post #ATeJWRFsomHs7WhAno by jeff@federated.fun
       2023-03-15T19:20:49.112248Z
       
       3 likes, 1 repeats
       
       @p @meso @mia @FrailLeaf obama biden sounds like osama binladen
       
 (DIR) Post #ATeJf0jKo4MASdYgvg by p@freespeechextremist.com
       2023-03-15T19:22:28.192484Z
       
       2 likes, 0 repeats
       
       @jeff @marine @meso That would be a good one.  A friend and I were talking out this potemkin instance, just set it up and see how convincing we could make it (bots following and unfollowing and going to sleep and waking up), see how long it took for people to figure out it was bots.I bet if we used Soapbox, it would take longer for people to realize it was all bots.
       
 (DIR) Post #ATeJkbw5u5kDIhCHUe by p@freespeechextremist.com
       2023-03-15T19:23:28.915267Z
       
       0 likes, 0 repeats
       
       @jeff @lanodan @n3n3tl Victoria Nuland is not a contractor, I'm surprised that you of all people don't know who she is.
       
 (DIR) Post #ATeJkk85RO5giCryIS by lunarised@whinge.town
       2023-03-15T19:23:18.791600Z
       
       2 likes, 0 repeats
       
       @p punished pFuck the fedsI'm building pipe bombs and dropping them in active sewer grates in minecraft
       
 (DIR) Post #ATeJoWTS9YDjWEfL5U by lanodan@queer.hacktivis.me
       2023-03-15T19:23:42.730886Z
       
       1 likes, 0 repeats
       
       @p Yeah, but she's not part of the government/state I reside in, heck she's not even related to European affairs anymore.
       
 (DIR) Post #ATeJq1U2LWwjyyecPQ by p@freespeechextremist.com
       2023-03-15T19:24:27.601196Z
       
       0 likes, 0 repeats
       
       @diceynes @FrailLeaf @meso If you search for posts on boardreader.com, they apparently do not know what a joke is.
       
 (DIR) Post #ATeJu84JnwtHZ3aBE0 by p@freespeechextremist.com
       2023-03-15T19:25:12.112105Z
       
       2 likes, 0 repeats
       
       @lunarised :terrylol2:
       
 (DIR) Post #ATeJvy75myqXGfl0NM by jeff@federated.fun
       2023-03-15T19:25:20.801660Z
       
       1 likes, 0 repeats
       
       @p @lanodan @n3n3tl she's the architect behind the Iraq and Afghanistan democracy shit? oh fuck off that's fucking hilarious
       
 (DIR) Post #ATeK52shQorGf4Lxbc by jeff@federated.fun
       2023-03-15T19:27:00.421759Z
       
       1 likes, 0 repeats
       
       @p @meso @marine i would literally just spider for open registrations servers, send captchas to mechanical turks and then make 10 new accounts an hour across all random servers. they would emulate timezones they are emulated to be in and post good morning and good night type posts when appropriate and respond when "awake", infrequently.
       
 (DIR) Post #ATeK69TEQ0U7O3y5zM by Waerloga@freespeechextremist.com
       2023-03-15T19:27:22.498550Z
       
       1 likes, 0 repeats
       
       @p  only scraping FSE….that sucks.
       
 (DIR) Post #ATeKDFLIz5aJctdyim by jeff@federated.fun
       2023-03-15T19:28:30.316836Z
       
       2 likes, 0 repeats
       
       @p @marine @meso i'd also make the anime pfp ai generated, the profiles ai generated and then feed it all into my locally hosted machine learning cluster. all requests anonymized via tor and other networks.
       
 (DIR) Post #ATeKGGg0TuFwdFleS0 by p@freespeechextremist.com
       2023-03-15T19:29:12.189087Z
       
       0 likes, 0 repeats
       
       @lanodan > Yeah, but she's not part of the government/state I reside inThat was the joke.  She is one of the foreign policymakers that is decidedly interventionist; there was that whole "re-colonizing Europe" piece two years ago (I don't have a link).
       
 (DIR) Post #ATeKJKiNvJ3M1eLEXI by meso@asbestos.cafe
       2023-03-15T19:29:44.911940Z
       
       1 likes, 0 repeats
       
       @jeff @marine @p now that's interesting
       
 (DIR) Post #ATeKMRgcSZJmW4034y by p@freespeechextremist.com
       2023-03-15T19:30:19.182741Z
       
       0 likes, 0 repeats
       
       @jeff @lanodan @n3n3tl And apparently heavily involved in the policy in Ukraine in both 2013 and 2022.
       
 (DIR) Post #ATeKQKxHQcqKnWeG0W by p@freespeechextremist.com
       2023-03-15T19:31:01.380306Z
       
       2 likes, 0 repeats
       
       @jeff @marine @meso Ah, that's like spamming someone else's servers.
       
 (DIR) Post #ATeKSONZfWKxzqvY7k by p@freespeechextremist.com
       2023-03-15T19:31:23.664531Z
       
       1 likes, 0 repeats
       
       @Waerloga It would suck less if they just scraped FSE's local posts from FSE.
       
 (DIR) Post #ATeKV3jaskzUpvUxqy by jeff@federated.fun
       2023-03-15T19:31:41.265255Z
       
       1 likes, 0 repeats
       
       @p @meso @marine yeah, but if you make a bunch of servers just for this i'll use those instead umu
       
 (DIR) Post #ATeKgA1np4LzXdJDkm by jeff@federated.fun
       2023-03-15T19:33:43.178231Z
       
       1 likes, 0 repeats
       
       @p @marine @meso i'll still spider and just have them follow every kind of user randomly
       
 (DIR) Post #ATeKjGJUuUahu743zU by p@freespeechextremist.com
       2023-03-15T19:34:26.594837Z
       
       2 likes, 0 repeats
       
       @jeff @marine @meso The idea was fleshed out but we did not end up doing it, and I'm done starting up new instances for the foreseeable future, because of the other shit I am doing that I hope will mean I have no more need to start or run instances.
       
 (DIR) Post #ATeKqXeKqyEfhLHZaK by jeff@federated.fun
       2023-03-15T19:35:35.207902Z
       
       0 likes, 0 repeats
       
       @p @meso @marine depending on the cost of domains i could ai generate domains to try to register and spin up servers on new domains, like 1 new server a day
       
 (DIR) Post #ATeLGjhgevrwc1LBHE by jeff@federated.fun
       2023-03-15T19:40:22.649460Z
       
       1 likes, 0 repeats
       
       @p @lunarised it's just a prank bro
       
 (DIR) Post #ATeLKezU7jUZ9aXKFs by jeff@federated.fun
       2023-03-15T19:41:05.404434Z
       
       1 likes, 0 repeats
       
       @diceynes @meso @p @FrailLeaf even jesus understands humor.
       
 (DIR) Post #ATeLNpkOaTTZNpzYaO by lanodan@queer.hacktivis.me
       2023-03-15T19:41:19.234555Z
       
       1 likes, 0 repeats
       
       @p Yeah, but that's government level and I don't think USA is going to invade France, that would trigger WW3 with potential for it going nuclear.And for net surveillance, it's been about decade since snowden leaks, upgrade your shit already.
       
 (DIR) Post #ATeLusJe3gYeuEEcrY by DocScranton@roysbeer.place
       2023-03-15T19:47:44.416482Z
       
       8 likes, 4 repeats
       
       a week or so before chudbuds fell, a new account made an extremely fed post (complete with weapon photos and planned date and location of massacre) that was deleted within minitesthe best part was it had already been plugged into archivetoday but only appeared there as a “post not found” page because it had been nuked before it made it through the archiving queue, in case there was any doubt as to motive for posting it
       
 (DIR) Post #ATeMJV85Ozd2EZZSLY by jeff@federated.fun
       2023-03-15T19:52:04.906149Z
       
       0 likes, 0 repeats
       
       @DocScranton @p @lunarised this is why registrations on my box will always remain closed.
       
 (DIR) Post #ATeOLJVrlLH2h4gaK8 by p@freespeechextremist.com
       2023-03-15T20:14:56.114096Z
       
       3 likes, 1 repeats
       
       @jeff @marine @meso You don't need an AI to generate names, you can just Markov existing names.pnsola.ovhstesockiryo.onecobes.mtoup.orgpeoweuenclo.id.questsonkumatostarasonte.mamanhyou.isven.netgaldou.xyzsuemysthor.netmymaexelu.rocksnxetobrffro.rkemahlusr.legalwwdiltrstc6.ninjacrntwwas.gardenndocitsusonerokeeestede.maywae.comd651.sizou.isquriork.socialveis.ccshub.piteedealedi.jpmaraht-p.fifg-mshe.comgiszabavial.milahbeshom.chatsgrosal.socialkedoth.iokyp.comeliuerwayayi.comheertetados.xyzsortsonesoctod.lukera.orgasont.caseay.funclesoli.comacup-5.commefrmas.ukchsrteviganineenodap-ken.stragaimd.buzzfralodr.spacesompenilol.jpmiriaiedai.comtowowlea.orgmapttdlistu.frrouic.gqpstostous-f5so.rarbytumas.onlineliapplllizhaswe.xomalo.academycifponerita.socialderarb.camavedouinybrf.netaelchon.comopiaclicrchn.commsomop.orgmayu.campbestusafee.coolhixaamie.bghasocky.orgmsoond.doghtasyudaps.audiommu.comn-i.ratpzo.org07865fddg.sedoucakige.espudocith.devidollyarich0106juldeloupre.cesitd.rsnplb.cloudnalenep.atmastb.questrt-121590.netshams.lolmulainiama.socialhalochenocad.socialcilakelerotf.townox-ala.ccxdeindi.wsmattval.mnpachruuno.comcrsurereuitweteileyuba.anji.works27ie.spacest112478kckseviasol.cakielirdon.chb5atulaubertchoresijubanma.martyuystho.comytrkchinginall.syude.eudubea.tkstasto.orghrol.netidoo.itskrtoclikeeomamactonuldelyncc.bea23d.soydothublk.demymowwwwiz.xyzrcitubini.socialrs.dekiawhabia.orgwkaneeronerogtcubatinam.toge.netk30ndozast.ovhrikeudc.netedthivasche.netsubgiln.nlloudone.club
       
 (DIR) Post #ATePTH86bhpbZavrYO by jeff@federated.fun
       2023-03-15T20:27:27.878578Z
       
       1 likes, 0 repeats
       
       @p @meso @marine but i WANT to use ai D:
       
 (DIR) Post #ATePszMlH4gK0e34hU by p@freespeechextremist.com
       2023-03-15T20:32:13.573143Z
       
       6 likes, 1 repeats
       
       @lanodan > invadeOh, no, the strategy was coopting the economy through oil and the government through NATO.  Why would you need to invade if you already run the government?> And for net surveillance, it's been about decade since snowden leaks, upgrade your shit already. That's kind of my point:  nothing changed.  Nothing.  It was the biggest revelation of the scope of government spying and nobody got arrested, nobody deleted their GMail account, public opinion didn't budge, and then we elected one of the participants as president.
       
 (DIR) Post #ATeQhbOMAaVCQIveqm by icedquinn@blob.cat
       2023-03-15T20:41:21.093343Z
       
       3 likes, 0 repeats
       
       @DocScranton @jeff @p @lunarised interesting. do you think it was one of those setups where a threat is supposed to get miraculously leaked to the press by the person posting it so they can blame the site for it later?
       
 (DIR) Post #ATeRH8G1y3pIUQycE4 by dcc@annihilation.social
       2023-03-15T20:47:45.921861Z
       
       1 likes, 0 repeats
       
       @jeff @p @DocScranton @lunarised my registration will only stat open untill a i reached a certain number of users
       
 (DIR) Post #ATeRIohFfLOaOyVp5s by xue@collapsitarian.io
       2023-03-15T20:48:05.253750Z
       
       1 likes, 0 repeats
       
       @p @lanodan two by four and plastic siding houses wouldnt work in Europewe are safe from recolonization
       
 (DIR) Post #ATeRKeWCTmIBPiDbhA by jeff@federated.fun
       2023-03-15T20:48:18.543012Z
       
       3 likes, 0 repeats
       
       @dcc @p @DocScranton @lunarised same, that number is 1 for me.
       
 (DIR) Post #ATeS9iikc9VtDSRKoC by r000t@ligma.pro
       2023-03-15T20:57:38Z
       
       1 likes, 0 repeats
       
       @pJust btw, at least some FBI agents do seem to have some idea how the fediverse works; They were able to speak somewhat intelligently about it and understood the concept of instances and instance blocks.They also confirmed both directly and indirectly, that they weren't even aware of my early February fedposting *until after* I made as:Public and everyone reported me to the FBI for making as:Public.They also nodded when I said "And it's not like the feds woukd even need to use my tools anyway. Y'all are probably already monitoring parts of that network"
       
 (DIR) Post #ATeSFgdvFjUyVd1heS by DocScranton@roysbeer.place
       2023-03-15T20:58:43.861126Z
       
       1 likes, 0 repeats
       
       it’s very likely, kiwifarms had that incident (during a period where new accounts’ first posts would be held for manual review) when a zero post account registered two years prior suddenly logged on, fedposted, archived it immediately, and sparked a twitter outrage that cloudflare used as a reason to heroically strike down the internet’s most evil website
       
 (DIR) Post #ATeSTQGIxAqll6Ws7s by sjw@freespeechextremist.com
       2023-03-15T21:01:13.242477Z
       
       1 likes, 0 repeats
       
       @p for whatever reason this post refuses to federate to Baest
       
 (DIR) Post #ATeSiHEMoVXg5nhpTM by parker@pl.psion.co
       2023-03-15T21:03:53.668242Z
       
       2 likes, 0 repeats
       
       @marine @p Focusing on FSE kind of makes sense, since it's been around a fair while, doesn't delete posts, and has no outgoing blocks. Makes it a useful aggregator of other instances.
       
 (DIR) Post #ATeSqYWsNkAC3lJM2q by 0a970d6ce29aabbdfda6aec40e53ea034324caf7d5775f7dc1b9983fc4ec5b1b@mostr.pub
       2023-03-15T21:05:22.000Z
       
       0 likes, 0 repeats
       
       Almost like Pete is a sneaky jew out to cause problems for people or something.
       
 (DIR) Post #ATeT0LjGpLkLFymK8W by coldacid@noagendasocial.com
       2023-03-15T21:07:09Z
       
       1 likes, 0 repeats
       
       @p mfw feds cannot into fedi
       
 (DIR) Post #ATeT0dSYuD4oFN6Eam by parker@pl.psion.co
       2023-03-15T21:07:12.657610Z
       
       1 likes, 0 repeats
       
       @marine @p It could just as likely be that they're using fse to farm old kfcc posts or whatnot.
       
 (DIR) Post #ATeT3z2t6e863ygfS4 by Humpleupagus@eveningzoo.club
       2023-03-15T21:07:48.419262Z
       
       5 likes, 0 repeats
       
       A public service announcement:https://youtu.be/eg3_kUaYFJA
       
 (DIR) Post #ATeTC0P3wUAyafstW4 by DutchShizoBoomer@poa.st
       2023-03-15T21:09:16.494771Z
       
       3 likes, 1 repeats
       
       @Humpleupagus @meso @jeff @mia @p @FrailLeaf I am in Holland and if you Say I want to K*ll the king you can get a 25 year prison sentenceone of those Old Napolean laws
       
 (DIR) Post #ATeTGEiyddmWAJDUvo by lamp@berserker.town
       2023-03-15T21:10:01Z
       
       1 likes, 0 repeats
       
       @r000t @p wuts fedposting
       
 (DIR) Post #ATeTNwKitsOrRVXsUS by grumpy@mirr0r.city
       2023-03-15T21:05:21.711699Z
       
       5 likes, 0 repeats
       
       @p rest in peace to sketchy "paraphile" instances
       
 (DIR) Post #ATeTQHRTOAxJUQoods by errante@rot.gives
       2023-03-15T21:11:49.551157Z
       
       0 likes, 0 repeats
       
       @grumpy @p is it time for rms death?
       
 (DIR) Post #ATeTWIsexBKfglPIIq by p@freespeechextremist.com
       2023-03-15T21:12:56.790245Z
       
       0 likes, 0 repeats
       
       @jeff @marine @meso Yeah, but it came up with some pretty good ones now that I read them:> bestusafee.cool> shams.lol> cobes.mtoup.org
       
 (DIR) Post #ATeTYocltzJeifAoCG by jeff@federated.fun
       2023-03-15T21:13:15.012078Z
       
       0 likes, 0 repeats
       
       @p @meso @marine low signal to noise ratio
       
 (DIR) Post #ATeUvWG0SNkiMwumsC by grumpy@mirr0r.city
       2023-03-15T21:22:38.351833Z
       
       3 likes, 0 repeats
       
       @errante @p rms was doomed from the start
       
 (DIR) Post #ATeUx1tEKhO2lWyvQG by errante@rot.gives
       2023-03-15T21:28:54.787676Z
       
       0 likes, 0 repeats
       
       @grumpy @p good riddanc
       
 (DIR) Post #ATeVzngJiPIJWRpJr6 by p@freespeechextremist.com
       2023-03-15T21:40:41.242299Z
       
       1 likes, 0 repeats
       
       @r000t I think it's to their advantage to pretend to know more than they do.
       
 (DIR) Post #ATeW8urAPMgcNiFSi0 by r000t@ligma.pro
       2023-03-15T21:42:18Z
       
       0 likes, 0 repeats
       
       @pIn my experience, they tend to do the opposite to get you talking.I've talked to feds far too many times for far too many reasons.
       
 (DIR) Post #ATeWGEWdg61bPW8Tk8 by icedquinn@blob.cat
       2023-03-15T21:43:38.010233Z
       
       1 likes, 0 repeats
       
       @r000t @p like for threatening to shoot up schools :blobcatderpy2:
       
 (DIR) Post #ATeWLetd3k3me7TaE4 by coldacid@noagendasocial.com
       2023-03-15T21:44:37Z
       
       1 likes, 0 repeats
       
       @r000t @p yeah, it's more to their advantage to play dumb and hope you let something incriminating slip when explaining things to them
       
 (DIR) Post #ATeWRQ7otIXCZVrSPQ by p@freespeechextremist.com
       2023-03-15T21:45:40.740494Z
       
       1 likes, 0 repeats
       
       @sjw Fuckin' weird.  Hey, @p!
       
 (DIR) Post #ATeX2N1fNPstfrbOO8 by grumpy@mirr0r.city
       2023-03-15T21:46:14.301640Z
       
       6 likes, 0 repeats
       
       @KayFaraday @p if you really don't think that feds would be interested in a website called "rapemeat.solutions" which is run and used by open pedophiles who talk about how much they love rape i don't know what to tell you
       
 (DIR) Post #ATeY6tSsoM41OW3MMi by p@freespeechextremist.com
       2023-03-15T22:04:22.760209Z
       
       0 likes, 0 repeats
       
       @0a970d6ce29aabbdfda6aec40e53ea034324caf7d5775f7dc1b9983fc4ec5b1b @marine @parker What the fuck is your problem?
       
 (DIR) Post #ATeYHAdtneMzZ96eTQ by grumpy@mirr0r.city
       2023-03-15T22:00:09.641203Z
       
       0 likes, 0 repeats
       
       @laura @KayFaraday @p i don't know. i'm just guessing that this isn't good news for places such as lolison and rm.s
       
 (DIR) Post #ATeYKIcWawXfB3xIGW by p@freespeechextremist.com
       2023-03-15T22:06:48.126840Z
       
       1 likes, 0 repeats
       
       @parker @marine It wasn't KF they asked about.
       
 (DIR) Post #ATeYNcmE6shiYo4wzI by r000t@ligma.pro
       2023-03-15T22:07:22Z
       
       1 likes, 0 repeats
       
       @icedquinn @p Can you show me where I've done that?
       
 (DIR) Post #ATeYTcXBvNiHXtuCCO by icedquinn@blob.cat
       2023-03-15T22:08:27.219855Z
       
       1 likes, 0 repeats
       
       @r000t @p did you forget that little 'someone play league with me or else' tyrade or are you just being cute. :blobcatcoy:
       
 (DIR) Post #ATeYVHdoZlDDKGnRK4 by p@freespeechextremist.com
       2023-03-15T22:08:47.235634Z
       
       1 likes, 0 repeats
       
       @grumpy Pressing S.
       
 (DIR) Post #ATeYX5883wPn6QpiU4 by p@freespeechextremist.com
       2023-03-15T22:09:06.734825Z
       
       1 likes, 0 repeats
       
       @errante @grumpy Nah, he's fine.
       
 (DIR) Post #ATeYa1sAd7Nvrvm3W4 by errante@rot.gives
       2023-03-15T22:09:36.479049Z
       
       1 likes, 0 repeats
       
       @p @grumpy i meant rapemeat solutions 😭 i dont like it
       
 (DIR) Post #ATeYe09ixHaxhbsY1w by p@freespeechextremist.com
       2023-03-15T22:10:21.769864Z
       
       1 likes, 0 repeats
       
       @jeff @marine @meso Probably due to onion domains.
       
 (DIR) Post #ATeYjos9or2kRfR7Gi by p@freespeechextremist.com
       2023-03-15T22:11:24.858335Z
       
       2 likes, 0 repeats
       
       @grumpy @errante Are you guys talking about some different rms than :saintignucius:?
       
 (DIR) Post #ATeYlqSIu9EJvyJFSq by grumpy@mirr0r.city
       2023-03-15T22:05:42.311820Z
       
       2 likes, 0 repeats
       
       @p @errante the instance, rapemeat.solutions
       
 (DIR) Post #ATeYsLGtFEYVFH4K7k by p@freespeechextremist.com
       2023-03-15T22:12:57.272412Z
       
       1 likes, 0 repeats
       
       @r000t If they're trying to talk to you, yes.  This guy didn't know that most of the posts on FSE are not from FSE.
       
 (DIR) Post #ATeZ1OWYWLQHwJiFvc by r000t@ligma.pro
       2023-03-15T22:14:33Z
       
       1 likes, 0 repeats
       
       @icedquinn @p Oh I remember it. I just also happen to remember making no articulate threats against specific places, people, or using specific methods. So I'm asking if you can show me any point at which I "threaten[ed] to shoot up schools"Even the biggest "receipt dump" for me links to the post in question, because I said I steal cryptocurrency to survive. That was the big sin in that post, not "I fear I will have to commit an act of mass violence to get anywhere, with anybody."
       
 (DIR) Post #ATeZFQEuwIFjJY9SDo by p@freespeechextremist.com
       2023-03-15T22:17:07.543212Z
       
       3 likes, 1 repeats
       
       @laura @grumpy @KayFaraday I can't wait.
       
 (DIR) Post #ATeZINWHVZsTkOgPC4 by 0a970d6ce29aabbdfda6aec40e53ea034324caf7d5775f7dc1b9983fc4ec5b1b@mostr.pub
       2023-03-15T22:17:36.000Z
       
       1 likes, 0 repeats
       
       >The one who makes it a point to archive the entire FEDiverse asks me why I’m upset.Delusional.
       
 (DIR) Post #ATeZSnUrmSaVD4zOfw by dcc@annihilation.social
       2023-03-15T22:19:31.566552Z
       
       1 likes, 0 repeats
       
       @p @KayFaraday @grumpy @laura i love fedi fed fun time
       
 (DIR) Post #ATeZde7OzQhfJCBf2O by 0a970d6ce29aabbdfda6aec40e53ea034324caf7d5775f7dc1b9983fc4ec5b1b@mostr.pub
       2023-03-15T22:21:29.000Z
       
       0 likes, 0 repeats
       
       Why did you advocate censoring fedposters p?
       
 (DIR) Post #ATeZkd5FEfG67tVYI4 by p@freespeechextremist.com
       2023-03-15T22:22:45.939984Z
       
       0 likes, 0 repeats
       
       @errante @grumpy It's administered by someone that gets eliminated from FSE every time he shows up anywhere.
       
 (DIR) Post #ATeZn2YTVKAnhhKV2O by errante@rot.gives
       2023-03-15T22:23:09.813582Z
       
       2 likes, 0 repeats
       
       @p @grumpy book???? 😳
       
 (DIR) Post #ATeZtR8J2M8BfV8hrk by Economic_Hitman@noagendasocial.com
       2023-03-15T22:24:21Z
       
       2 likes, 0 repeats
       
       Wait, you're saying that  Gmail is FROM HOTMAIL even when I use Google Gmail to see it?!t. fixed@mia @meso @marine @p
       
 (DIR) Post #ATeZtvpatyaCsRchVI by p@freespeechextremist.com
       2023-03-15T22:24:26.809999Z
       
       0 likes, 0 repeats
       
       @0a970d6ce29aabbdfda6aec40e53ea034324caf7d5775f7dc1b9983fc4ec5b1b @marine @parker I didn't ask why you're upset.  I don't care about that.
       
 (DIR) Post #ATeZwEUcUNm1KnuTAG by p@freespeechextremist.com
       2023-03-15T22:24:51.760849Z
       
       2 likes, 0 repeats
       
       @0a970d6ce29aabbdfda6aec40e53ea034324caf7d5775f7dc1b9983fc4ec5b1b @marine @parker Read the post if you don't know.
       
 (DIR) Post #ATea1F0E1NFeMb55Sy by p@freespeechextremist.com
       2023-03-15T22:25:46.069272Z
       
       1 likes, 0 repeats
       
       @errante @grumpy Does Eris run rapemeat.solutions?
       
 (DIR) Post #ATea3xRJmCkIlH361I by grumpy@mirr0r.city
       2023-03-15T22:20:11.435181Z
       
       4 likes, 0 repeats
       
       @p @errante wow, that's very anti-biastophile of you mr. extremist. are you a biastophobe?
       
 (DIR) Post #ATea4ZePhxnfGtT5hw by errante@rot.gives
       2023-03-15T22:26:19.108688Z
       
       2 likes, 0 repeats
       
       @p @grumpy its funnier if i say yes
       
 (DIR) Post #ATea6QPr0vU7D2XaTo by mia@freespeechextremist.com
       2023-03-15T22:26:42.273743Z
       
       4 likes, 2 repeats
       
       @Economic_Hitman @meso @marine @p I should have said "[The] Google Gmail" to really drive that disconnect home.------Sent from my iPhone7S via Tapatalk.
       
 (DIR) Post #ATeaacYQRsePXiwrjs by p@freespeechextremist.com
       2023-03-15T22:32:09.713129Z
       
       2 likes, 0 repeats
       
       @mia @Economic_Hitman @marine @meso "Wouldn't it be a security issue if hotmail could just make gmails like that?"
       
 (DIR) Post #ATeah7QCb6Wp0vCUN6 by mia@freespeechextremist.com
       2023-03-15T22:33:20.174458Z
       
       2 likes, 0 repeats
       
       @p @Economic_Hitman @marine @meso I'm pretty Cloudflare fixed that problem.
       
 (DIR) Post #ATeahyggYYCmDOJtvE by mia@freespeechextremist.com
       2023-03-15T22:33:29.489101Z
       
       1 likes, 0 repeats
       
       @p @Economic_Hitman @marine @meso sure.
       
 (DIR) Post #ATealFy4lRjcg719iC by 7@collapsitarian.io
       2023-03-15T22:34:01.581072Z
       
       3 likes, 1 repeats
       
       @mia @meso @marine @p @Economic_Hitman Cloudflare cosmetic surgery services
       
 (DIR) Post #ATeavvUtDLjmNISC80 by mia@freespeechextremist.com
       2023-03-15T22:36:00.732062Z
       
       3 likes, 0 repeats
       
       @7 @Economic_Hitman @marine @meso @p Click the pretty sailboats.
       
 (DIR) Post #ATelo2X8GkOBNNwdiy by bless@mirr0r.city
       2023-03-16T00:31:45.515308Z
       
       1 likes, 0 repeats
       
       @errante @p @grumpy do you think that's the sketchiest oneit can be hard to tell anymore
       
 (DIR) Post #ATem5FM1r2V43vxL3Q by bless@mirr0r.city
       2023-03-16T00:34:52.652340Z
       
       2 likes, 0 repeats
       
       @errante @grumpy @p anyway, feeling good as ever about glowing up from 'fedi instance admin' to 'vague fedi deep state'
       
 (DIR) Post #ATepKvokYj8FxxYpoO by sumire-chan@lolison.top
       2023-03-16T01:17:22.088843Z
       
       0 likes, 0 repeats
       
       @grumpy @KayFaraday @p @laura What do lo.t/lo.n have to do with this, again?
       
 (DIR) Post #ATerz5nx2w5CQrSucy by lanodan@queer.hacktivis.me
       2023-03-16T01:46:38.342265Z
       
       0 likes, 0 repeats
       
       @p There was jurisdiction effects to Snowden leaks, of course most people didn't change their habits, because a lot of them simply don't even begin to understand the problems at hand.As for "nobody deleted their GMail account", I think the self-hosting community got much bigger post-Snowden, because now you do have very strong reasons to do so.Heck, it's the primary reason why Framasoft's "Dégooglisons Internet" (De-Googlize Internet) campaigns exists, Google usage before wasn't really seen as a problem.GDPR (project from 2012) probably wouldn't have been as strong without Snowden leaks, a lot of what Snowden showed being that Surveillance Capitalism (coined post-Snowden) isn't just an issue for people (previous data protection laws), but also for the Nation/State/…IETF changed requirements post-Snowden leaks, now new standards have to address security issues, one of which being state surveillance. (Ought to have been done before but I guess most people don't care about surveillance in countries like Libya)Of course, USA on the other hand, legalized State Surveillance via the Patriot Act and CLOUD Act. So I guess that might explain why so many Americans didn't see a fucking change, it pretty much got worse.
       
 (DIR) Post #ATesoTmLfdrlYVDcSO by Moon@shitposter.club
       2023-03-16T01:56:15.643587Z
       
       1 likes, 0 repeats
       
       @lanodan @p what does gdpr have to do with snowden, like specifically? also you can't secure email and receive all your email
       
 (DIR) Post #ATetTBCTeMtBo9qbxo by grumpy@mirr0r.city
       2023-03-16T01:57:38.515653Z
       
       1 likes, 0 repeats
       
       @sumire-chan @KayFaraday @p @laura i would definitely consider them sketchy
       
 (DIR) Post #ATetnwmSSPNpARa1E8 by FatNiggerDykeCunt@poa.st
       2023-03-16T02:07:27.543197Z
       
       1 likes, 0 repeats
       
       @p You got a warrant officer Glownigger?
       
 (DIR) Post #ATeuBOcT7RKmAW5ZWS by sumire-chan@lolison.top
       2023-03-16T02:11:41.511216Z
       
       0 likes, 0 repeats
       
       @grumpy @KayFaraday @p @laura They don’t seem any sketchier than youjo to me. Pretty comparable overall.
       
 (DIR) Post #ATeuW2j7i7D8Lp2xbU by grumpy@mirr0r.city
       2023-03-16T02:09:20.916296Z
       
       1 likes, 0 repeats
       
       @sumire-chan @KayFaraday @p @laura youjo is sketchy too
       
 (DIR) Post #ATeutABi8WXe9SRWc4 by sumire-chan@lolison.top
       2023-03-16T02:19:36.037242Z
       
       0 likes, 0 repeats
       
       @grumpy @KayFaraday @p @laura Then why call them out specifically when youjo is far more popular and better known?
       
 (DIR) Post #ATewW2YIYkcviZ6s5o by grumpy@mirr0r.city
       2023-03-16T02:31:45.461628Z
       
       3 likes, 0 repeats
       
       @sumire-chan @KayFaraday @p @laura it came to mind first. ive never seen a youjo user post softcore cp in a hellthread, but ive seen a lolison user do it
       
 (DIR) Post #ATexZA0DPqfleCDfaC by lanodan@queer.hacktivis.me
       2023-03-16T02:49:05.392919Z
       
       1 likes, 0 repeats
       
       @Moon @p > what does gdpr have to do with snowden, like specifically?IIRC it made lawmakers realize privacy isn't just an issue between your machine and somebody's servers, or about what kind of data an organisation can store and how.Effectively, they finally realized that the internet isn't client-to-server like a fucking phone but also server-to-server.> also you can't secure email and receive all your emailDo *not* mix security and privacy, it's not the same problems, for privacy issues, it doesn't matters if Google is secure, the issue is them selling data and cooperating with state surveillance, with of course no transparency around the latter.In fact, email pretty much fares better than your average web-based messenger about privacy, even with it being complete crap about security.One of the reasons being that you can't do much tracking on a federated network.And no, not all emails ends up on Gmail, that's a gross misunderstanding of how email as a network works, you don't broadcast your emails and for things like mailing-lists (only place where average usage stats can begin to matter): Who sends private information on those?
       
 (DIR) Post #ATexeI94ZIhwLkoEXQ by grumpy@mirr0r.city
       2023-03-16T02:44:27.762841Z
       
       2 likes, 0 repeats
       
       @laura @KayFaraday @laura @p @sumire-chan yeah he totally owned the antis with that pro gamer move. truly helped us propel ourselves forward in society
       
 (DIR) Post #ATf28YCRqIFCe74Wye by PhenomX6@fedi.pawlicker.com
       2023-03-16T03:40:46.077066Z
       
       1 likes, 0 repeats
       
       >That thing I have been saying for years, that they don't understand federation, they see "one site" and think "one site", that they don't understand the network? That's apparently completely accurate: they don't understand federation. They're asking me about some post that arrived on FSE but did not originate here, and when I explained this, they asked for help identifying the origin server.I mean, neither do many other groups who want to fuck with the fedi or take it over. When the journalist flamewar and Musk Derangement migration happened, there were normies thinking that Russian hackers were spinning up instances.The feds are very clueless about this federation thing, which is why all the pedo sites like nnia/youjo/etc. all have the privacy settings on levels you'd only see on say, guys running single user instances on a shitty VPS/in a basement trying to avoid being targeted for federated posts would have. Then again, so is 90% of the internet. When setting up fedi instances or telling friends how to I tell people to hide TWKN for this reason.
       
 (DIR) Post #ATf4tVpafOIKontwzw by meowski@fluf.club
       2023-03-16T04:11:36.344689Z
       
       1 likes, 0 repeats
       
       @p >they don't understand federation, they see "one site" and think "one site"this is why i don't make TWKN public.  i know i've said this exact thing before.  a judge just sees that "it's on your web site" and doesn't give a shit about how it got there. it's "your web site" and that's the extent of their understanding
       
 (DIR) Post #ATf6Xs4DVsg1JrYEqG by Humpleupagus@eveningzoo.club
       2023-03-16T04:30:10.802747Z
       
       1 likes, 0 repeats
       
       Same for the Zoo.
       
 (DIR) Post #ATf94544vIDuo2yNk0 by redditeur@poa.st
       2023-03-16T04:58:27.124523Z
       
       0 likes, 0 repeats
       
       @p I think it's a mistake to believe that the feds just don't know how federation works. They know, but they play dumb so you may think you're smarter than them and make a mistake. I think it was Sabu who was initially interrogated by them and thought they didn't "get" even SQL injection, so he went to chat about how retarded the feds were on IRC and got implicated into a lot of shit.
       
 (DIR) Post #ATfV86M8GKRSxcjvvs by Moon@shitposter.club
       2023-03-16T09:05:30.225436Z
       
       1 likes, 0 repeats
       
       @lanodan @p i just mean that tls isn't even required for smtp, a lot of servers don't enforce it or even check the certificate, and if you block it you just won't get some mail
       
 (DIR) Post #ATfVcaNDDsJKkHmU0u by lanodan@queer.hacktivis.me
       2023-03-16T09:10:45.949235Z
       
       1 likes, 0 repeats
       
       @Moon @p I think GMail might start to enforce TLS at some point, maybe even already did.Here almost all my emails are sent with tls, it's a thing I setup years ago and so far I only got 6 outgoing domains where I don't force tls. For incoming I don't force it.And I think I heard something like DANE being required in Germany for things like banks.
       
 (DIR) Post #ATfWXQq7LFKbgQPKK0 by Moon@shitposter.club
       2023-03-16T09:21:21.084581Z
       
       1 likes, 0 repeats
       
       @lanodan @p i was forcing tls on incoming
       
 (DIR) Post #ATfXH7QBs0uYmP47jE by lanodan@queer.hacktivis.me
       2023-03-16T09:29:17.587766Z
       
       1 likes, 0 repeats
       
       @Moon @p I don't think I'd ever do that, except maybe stash tls-less in the spam folder.Because I do want to receive all emails, heck I don't even have a threshold where I completely discard spam (which saved my ass few times, some people are really terrible at sending emails).
       
 (DIR) Post #ATg0zmA2ezNEXl9tEu by p@freespeechextremist.com
       2023-03-16T15:02:44.988987Z
       
       4 likes, 0 repeats
       
       @lanodan > There was jurisdiction effects to Snowden leaksSeparate issue, yes, from the joke, which was that the "Spartan border" now includes anyone within the US nuclear umbrella and sphere of economic influence.  (The joke was only partially a joke; the Catholic Church didn't need to invade to control Europe, they just needed to be able to tell kings what to do.  Persia didn't have to invade China or Rome to prevent direct trade between China and Rome, it just had to sit in the middle and decide to stop the trade.)> I think the self-hosting community got much bigger post-Snowden, because now you do have very strong reasons to do so.I think people used Snowden to talk about their self-hosting efforts.  I did.  If anything, since then I have seen less self-hosting.We could probably measure this:  Eben Moglen could wear a digital blood pressure monitor (powered, of course, by free software) that broadcasts his 24-hour average to the net.  The higher it gets, the less people are self-hosting.I think it's important to do, and I'm grateful for efforts people have made to make it easier and to expand the types of things one can self-host (Pleroma is a very good example).> now you do have very strong reasons to do so.I think anyone that understood what was going on was already self-hosting.  "Encrypt everything!" was a mantra, nobody was really surprised by Snowden.  The reason already existed, just most people ignored it.> Heck, it's the primary reason why Framasoft's "Dégooglisons Internet" (De-Googlize Internet) campaigns exists, Google usage before wasn't really seen as a problem.I disagree; see Conte's paper, "Googling Considered Harmful", from 2006.  And, although I agree with the push for decentralization (because it increases autonomy and privacy and weakens governments), and I view Google as an opponent of any efforts to decentralize, I cannot help but notice that not only has Google grown and absorbed more of the internet, Amazon Ring exists now, Microsoft has significantly improved its surveillance game, Apple joined it.  When I worked somewhere, it used to be the case that there was a company mail server (and you'd take it as a bad sign if it turned out to be Exchange):  now it is always Google.And if the internet decentralization efforts amounted to much so far, control of censorship on Twitter, Youtube, Google Search, Facebook, etc., would not be an important issue:  it is because those are now the places that public opinion lives.  More people are self-hosting than were before, maybe, but more people are plugged into the surveillance infrastructure.> GDPR (project from 2012) probably wouldn't have been as strong without Snowden leaksI maintain that it is toothless except as a money-grab until Google stops spying.> IETF changed requirements post-Snowden leaks, now new standards have to address security issues, one of which being state surveillance.Yes, that's wonderful, although people tend to jump directly onto surveillance platforms, > Of course, USA on the other hand, legalized State Surveillance via the Patriot Act and CLOUD Act."9/11" is on the list right after PRISM and the DMCA and the warrantless wiretapping and Operation Choke Point; your earlier crack that I need to update my list of catastrophes will be considered after those catastrophes stop happening.  (CLOUD Act doesn't matter if you only use host-proof systems.)> So I guess that might explain why so many Americans didn't see a fucking change, it pretty much got worse. Well, we didn't end up with a "Health Pass".googling_considered_harmful.pdf
       
 (DIR) Post #ATg19AU1bFAkaGz4Bk by p@freespeechextremist.com
       2023-03-16T15:04:26.839493Z
       
       0 likes, 0 repeats
       
       @sumire-chan @grumpy @KayFaraday @laura All of them are sketchy, yes.
       
 (DIR) Post #ATg4Jy0qba32xHB3lw by lanodan@queer.hacktivis.me
       2023-03-16T15:39:27.476573Z
       
       2 likes, 0 repeats
       
       @p > We could probably measure this:  Eben Moglen could wear a digital blood pressure monitor (powered, of course, by free software) that broadcasts his 24-hour average to the net.I see this more as leaking your health data out in public, something Facebook, Oracle, … would love to see people sharing, even though it's not legal for them to collect such data.At least I haven't seen people do this kind of thing in ages, streamers are basically the only ones where some 24/7 streaming could maybe happen again.I don't think you're not going to see that kind of stuff outside of silos (hello fitbit), basically because people that don't use silos today are typically privacy-conscious or avoid computers.>I maintain that it is toothless except as a money-grab until Google stops spying.Most of Google in EU and countries with similar regulations are basically counted, I'm pretty sure that in few years I won't see anything legal in Europe depending on a Google service. As I said before, usage of Google Analytics is starting to be inexistant, and it's not going to merely stop at the Analytics part.And I don't think Google won't spy, it's part of their core business model, they would have to create spin-offs like maybe reinforcing their SaaS services towards corporations, maybe damage youtube again with trying to make it much more profitable, …
       
 (DIR) Post #ATg6hScbATRySJAK7U by p@freespeechextremist.com
       2023-03-16T16:06:40.200007Z
       
       2 likes, 0 repeats
       
       @laura @grumpy @KayFaraday @laura @sumire-chansicsemper.png
       
 (DIR) Post #ATg8Mnkxas49pbLyAS by p@freespeechextremist.com
       2023-03-16T16:25:20.770027Z
       
       3 likes, 0 repeats
       
       @PhenomX6 > I mean, neither do many other groups who want to fuck with the fedi or take it over. When the journalist flamewar and Musk Derangement migration happened, there were normies thinking that Russian hackers were spinning up instances.Yes, I was present for this.  I am discussing feds, though, not wider public perception.> When setting up fedi instances or telling friends how to I tell people to hide TWKN for this reason.It's a mistake to do that in general; there's a paragraph about that, but it also hurts adoption:  if people can't see what's going on, they don't have a reason to join fedi.
       
 (DIR) Post #ATg8SeDVyS07yzUsvw by p@freespeechextremist.com
       2023-03-16T16:26:24.177483Z
       
       2 likes, 0 repeats
       
       @meowski Yeah, that's why I have media proxy off; we discussed that a few times.
       
 (DIR) Post #ATg8zW31MsYECcGHWS by p@freespeechextremist.com
       2023-03-16T16:32:20.570051Z
       
       0 likes, 0 repeats
       
       @redditeur Relying on them to not know or learn something is a danger, but relying on them to know is as bad.  I expected that they wouldn't know, they seem not to know:  I wouldn't rely on it.
       
 (DIR) Post #ATgAUhkM1Oo1Pvxxc8 by dcc@annihilation.social
       2023-03-16T16:49:10.182945Z
       
       1 likes, 0 repeats
       
       @p @meowski exactly, media proxy is a big risk
       
 (DIR) Post #ATgB1hhxBcaCqyZvvc by kirbyV2@pwnage.nyanide.com
       2023-03-16T16:55:07.991244Z
       
       1 likes, 0 repeats
       
       @p wow! Gratz. when do I get that email for pwnage?
       
 (DIR) Post #ATgEsPOAKKehFR96q8 by p@freespeechextremist.com
       2023-03-16T17:38:17.324748Z
       
       1 likes, 0 repeats
       
       @Moon @lanodan > or even check the certificateThis is good:  mail servers are one of the few places where you can use self-signed certificates.
       
 (DIR) Post #ATgExtm0mjkgvquxDE by p@freespeechextremist.com
       2023-03-16T17:39:16.856766Z
       
       3 likes, 0 repeats
       
       @Moon @lanodan Forcing TLS on incoming mail eliminates, like, 99% of the spam you get nowadays.
       
 (DIR) Post #ATgF8XoImdkE0546Pg by Moon@shitposter.club
       2023-03-16T17:41:06.524878Z
       
       1 likes, 0 repeats
       
       @p @lanodan on my personal mail server i did do that
       
 (DIR) Post #ATgGtBGWWR8ddx4ExE by meowski@fluf.club
       2023-03-16T18:00:41.327133Z
       
       2 likes, 0 repeats
       
       @p with media proxy it really is "on your web site." even worse.
       
 (DIR) Post #ATgLH4gb2H820JuaQq by p@freespeechextremist.com
       2023-03-16T18:49:58.586248Z
       
       2 likes, 0 repeats
       
       @lanodan > I see this more as leaking your health data out in publicIt was a joke:  Eben Moglen is the law professor doing the Freedom Box.  He tends to speak about these things in very strong terms and yelled at some journos about having a Facebook account, the joke is that his blood pressure will spike when people are not self-hosting and that it will go down when people are.(I think it is okay to yell at people for having a Facebook account, but here he is and everyone's going "Isn't it cute how upset this fat old man gets about Facebook?" and this is December 2011, more than a year before the PRISM leaks:  https://observer.com/2011/12/in-which-eben-moglen-like-legit-yells-at-me-for-being-on-facebook-2/ :  "Moglen: Right. But you’re not going to do anything about that. So you’re using them and every time you tag anything or respond to anything or link to anything, you’re informing on your friends. You’re part of the problem, you’re not part of the answer. Why are you calling up to ask *me* about the problem *you’re* creating?")> Facebook, Oracle, … would love to see people sharingI don't think it's a matter of who is sharing what, but who controls access to it.  Apple makes a little biometrics-collector and then controls access to the data that comes out of it.  Google shits these stupid Android phones onto the earth and then uses them to feed itself data on the location of every car and every WAP and all of the other things it collects.  The data only matters to them to the extent that they can control it.> outside of silos (hello fitbit), basically because people that don't use silos today are typically privacy-conscious or avoid computers.I thought the Pebble watches were kinda cool.  They didn't do that stuff, it was just a hackable tiny wrist computer...so they tanked, no one bought them.  I think it's better to, if you see a cool thing, try to find one outside a silo instead of only noticing Apple or Fitbit.> usage of Google Analytics is starting to be inexistantSo I hear, but this is like saying Antarctica's a safe place because there are no venomous snakes.  If *all* use of proprietary analytics went down, that would be better.  There seem to be startups designed around providing the same features for the regulatory framework:  https://www.crunchbase.com/hub/europe-analytics-companies .
       
 (DIR) Post #ATgLU6el1NkzsbGWkC by p@freespeechextremist.com
       2023-03-16T18:52:19.911579Z
       
       3 likes, 2 repeats
       
       @kirbyV2 Ha, took FSE four and a half years to receive one of these.
       
 (DIR) Post #ATgMrJYjJb0AVm4oJU by p@freespeechextremist.com
       2023-03-16T19:07:43.857711Z
       
       1 likes, 0 repeats
       
       @Moon @lanodan I haven't done it, but I have an awk script that cares very intensely about the logs and has an itchy trigger finger connected to iptables.
       
 (DIR) Post #ATgPJWQXGYkOR9p1E0 by Moon@shitposter.club
       2023-03-16T19:35:06.657750Z
       
       2 likes, 0 repeats
       
       @p @lanodan opensmtpd can just be configured to disallow non tls. however, opensmtpd sucks and i got rid of it after like the fifth serious exploit despite supposing to be more securely coded
       
 (DIR) Post #ATgPWt4uMR1aS94x6m by p@freespeechextremist.com
       2023-03-16T19:37:39.237696Z
       
       0 likes, 0 repeats
       
       @Moon @lanodan I think you can do it with exim too, but it probably requires you to figure out how to analyze chicken bones in m4.  (I hate exim but it's Installed And Works.)
       
 (DIR) Post #ATgPltUb6QAC58FbGa by dcc@annihilation.social
       2023-03-16T19:40:20.299147Z
       
       1 likes, 0 repeats
       
       @p @lanodan @Moon is exim better than postfix?
       
 (DIR) Post #ATgPuMVT73o2NrhD0q by Moon@shitposter.club
       2023-03-16T19:41:48.281146Z
       
       2 likes, 0 repeats
       
       @dcc @p @lanodan my vote's for postfix if nothings already installed but interested to hear what pete says. postfix was pretty easy to set up
       
 (DIR) Post #ATgQ9ncIbGu0oBFg1Y by p@freespeechextremist.com
       2023-03-16T19:44:41.211012Z
       
       1 likes, 0 repeats
       
       @dcc @Moon @lanodan Probably not.  Maybe it is.  This most recent time, I had to recompile it to add support for Dovecot auth, apparently that's no longer in by default.
       
 (DIR) Post #ATgQfgcK9ycaMlT72W by p@freespeechextremist.com
       2023-03-16T19:50:26.972262Z
       
       1 likes, 0 repeats
       
       @Moon @dcc @lanodan Basically when I was setting up my mail server (in a rush in 2009 to escape Google forever), I confused Postfix with Exim and have been using Exim since that time.  Hasn't given me any problems, is stable, integrates properly with Dovecot (modulo earlier recompilation woes); Exim is also a huge pain in the ass.  I haven't seen an MTA that *isn't* a huge pain in the ass, though.
       
 (DIR) Post #ATgV42UMtPcgxzcC0G by dcc@annihilation.social
       2023-03-16T20:39:37.871898Z
       
       2 likes, 0 repeats
       
       @p @lanodan @Moon im only using postfix becuase of the luke smith script (its bad) i had to change a lot of its config and also 3 lines is adds to the postfix config make it so you can't receive email. Dont use gootuber shit :dude_surprised:
       
 (DIR) Post #ATgWXIKPBJXQRYT808 by redditeur@poa.st
       2023-03-16T20:56:09.622906Z
       
       1 likes, 0 repeats
       
       @p If a bunch of retarded autists like us can get the hang of specific techs, so can the feds, that's my angle.  But they'll love the opportunity to play dumb and make us incriminate ourselves somehow.
       
 (DIR) Post #ATgcHafRpNrUPiCqf2 by p@freespeechextremist.com
       2023-03-16T22:00:33.301862Z
       
       2 likes, 0 repeats
       
       @redditeur Well, in my case, it's my profession, so I expect to catch on faster than a fed.  I also expect feds to care more about their job than to get super into whatever weird tech they bump into.  99% of them want to do the minimum they can to get their job done and the other 1% get promoted past field work.  (NSA would be a different matter.)
       
 (DIR) Post #ATgcdrI8hUmcLKvEYq by ins0mniak@freespeechextremist.com
       2023-03-16T22:04:34.781534Z
       
       1 likes, 0 repeats
       
       @p @redditeur Computer is a way of life.
       
 (DIR) Post #ATh9hIRnUPJ9vBgd9s by lanodan@queer.hacktivis.me
       2023-03-17T04:14:32.233395Z
       
       1 likes, 0 repeats
       
       @Moon @p I still use OpenSMTPd but I'm honestly quite considering writing my own email server.Because no email server is actually decent in terms of security, or they just don't have any serious maintenance (qmail).How to avoid root exploits? Just don't fucking run the server as root, capabilities(7) have been there for years to precisely allow things like opening a <1024 port.
       
 (DIR) Post #AThnd3VL6KNAaKsMu8 by Moon@shitposter.club
       2023-03-17T11:42:15.993276Z
       
       1 likes, 0 repeats
       
       @lanodan @p interestingly opensmtpd is an example of good unix application architecture, it runs its components in separate processes that drop privileges, and communicate over IPC. I don't know why they keep getting pwned
       
 (DIR) Post #AThpKv9JcuyBMr3St6 by lanodan@queer.hacktivis.me
       2023-03-17T12:00:59.522926Z
       
       1 likes, 0 repeats
       
       @Moon @p yeah, it has a better architecture than most and nearly does least-privilege.And the way it fails that is by running the core part as root, meaning that if exploits happen, they're very dangerous.Meanwhile remote code execution on a user dedicated to the MTA is pretty much useless. MDA part of course should have a level of indirection, either by being an IMAP server, or for Maildir, filesystem ACLs and doas are things that exists.
       
 (DIR) Post #AThpNPmIijeswMTm2C by Moon@shitposter.club
       2023-03-17T12:01:53.775058Z
       
       2 likes, 0 repeats
       
       @lanodan @p > the way it fails that is by running the core part as rootwhyyyyy
       
 (DIR) Post #AThpQ3HSp0RC2DJSjo by Moon@shitposter.club
       2023-03-17T12:02:17.114311Z
       
       1 likes, 0 repeats
       
       @lanodan @p on openbsd they have pledge, it super easy to drop privs too lol
       
 (DIR) Post #AThpW2kLiiz87EgGlk by p@freespeechextremist.com
       2023-03-17T12:03:32.630898Z
       
       0 likes, 0 repeats
       
       @lanodan @Moon > Just don't fucking run the server as root, capabilities(7) have been there for years to precisely allow things like opening a <1024 port.Seems like, now that the person:computer ratio has inverted, you shouldn't need to be root to open ports under 1024 anyway.
       
 (DIR) Post #AThqkYVqVmBYe2NfnM by lanodan@queer.hacktivis.me
       2023-03-17T12:16:56.095167Z
       
       3 likes, 0 repeats
       
       @Moon @p As much as I like pledge/unveil as basically security asserts and as a way of having things getting more and more precise during runtime.It is just not the correct solution to address the issue at hand, you should strive to give the least privileges to software before even launching it.And pledge/unveil aren't capabilities, so if you manage to execute some program, you basically have done the equivalent of a sandbox escape.
       
 (DIR) Post #AThr5aX0CXvMzEx0dc by lanodan@queer.hacktivis.me
       2023-03-17T12:20:44.232752Z
       
       2 likes, 0 repeats
       
       @p @Moon Yeah, it's an artifact of the past, I could disable it but the only remaining safeguard would be a firewall running on the system, and I don't trust those things, they do not fail safe, like a config error leaves you open.I'd rather grant ports to users via a nice config file, and the capabilities can still stay so stuff somehow launched outside of the service-manager can't grab a port.
       
 (DIR) Post #AThr6D3wwUrGUQerGi by Moon@shitposter.club
       2023-03-17T12:21:11.319720Z
       
       1 likes, 0 repeats
       
       @lanodan @p I don't think openbsd has a kernel capability system
       
 (DIR) Post #AThrDQb31RvuUWa6Pw by lanodan@queer.hacktivis.me
       2023-03-17T12:22:09.046214Z
       
       2 likes, 0 repeats
       
       @Moon @p I don't think so either, meaning that for this particular thing, it's behind FreeBSD (which has true capabilities via capsicum) and Linux.
       
 (DIR) Post #AThs2r1sVPeHEveXqK by Moon@shitposter.club
       2023-03-17T12:31:43.342426Z
       
       1 likes, 0 repeats
       
       @lanodan @p theo considers mandatory access control and capabilities to be "knobs to turn" last time i was on the mailing list ten ish years ago
       
 (DIR) Post #AThuzTwkAcTCdxKpMm by lanodan@queer.hacktivis.me
       2023-03-17T13:04:19.805028Z
       
       2 likes, 0 repeats
       
       @Moon @p True for MAC, debatable for linux-capabilities (which are more like runtime ACLs than capabilities).But it's bullshit for actual capabilities like capsicum, SEL4, …In a way, how do you safely pass a file descriptor to another program or same program but dropped privileges without actual capabilities, because things like fchmod(2) can lead to pretty fun things.
       
 (DIR) Post #ATi12OE8UVYnUyEvYG by p@freespeechextremist.com
       2023-03-17T14:12:38.686291Z
       
       0 likes, 0 repeats
       
       @lanodan @Moon Well, what I mean is that the ports shouldn't require special permissions.  The problem is the OS, not the MTA.
       
 (DIR) Post #ATi1VwZ3u6qEOO7VVw by lanodan@queer.hacktivis.me
       2023-03-17T14:17:32.279323Z
       
       1 likes, 0 repeats
       
       @p @Moon Well, you probably still wouldn't want random programs to be able to listen on any port they want, that could be rather problematic (like crash the MTA, listen on 25, you now get ~all the important mails).But the <1024 limit is bullshit, because I would instead want to reserve specific ports (XMPP, IRC, … ports aren't <1024).
       
 (DIR) Post #ATi37LVGFGkQPIjzjE by p@freespeechextremist.com
       2023-03-17T14:35:57.038719Z
       
       1 likes, 1 repeats
       
       @lanodan @Moon > Well, you probably still wouldn't want random programs to be able to listen on any port they want, that could be rather problematic (like crash the MTA, listen on 25, you now get ~all the important mails).In Plan 9, listening on the port is divorced from actually doing anything:  the MTA gets a file descriptor.  Who would have thought that inetd-style is the actual way to go?  (Everyone.)But that only matters if you are already breaking shit by letting untrusted people onto your machine.  This is why I mentioned the human:computer ratio:  security was designed around avoiding problems created by the ratio being lower than 1:  now it is way, way higher, and your problem is keeping the network from intruding.  So the MX box has the MTA on it (usually just the MTA), and anyone that has a shell on that box probably has sudo anyway.  If someone else gets into that box, sure, but the reason it's just the MTA is usually because if it's just the MTA, there's not a route onto the box besides breaking open the MTA.
       
 (DIR) Post #ATi41eu7IfvAnKDddw by lanodan@queer.hacktivis.me
       2023-03-17T14:45:38.690584Z
       
       2 likes, 0 repeats
       
       @p @Moon Wow, I didn't except Plan9 to do it capability-style, based.> But that only matters if you are already breaking shit by letting untrusted people onto your machine.Well, that concern still exists, it's just that instead of having a student body between the keyboard and chair, it can be any random person on internet that managed to get some kind of exploit.And given how things are used today, a student body or one person using npm/pip/cargo/… is quite comparable to me.(Should be noted that I bloody hate those dependency-installers and would ban them on things like work machines)
       
 (DIR) Post #ATi4EcoEOsw63teI5o by lanodan@queer.hacktivis.me
       2023-03-17T14:48:01.460044Z
       
       2 likes, 0 repeats
       
       @p @Moon > So the MX box has the MTA on it (usually just the MTA)Except nearly all Unix machines should have an MTA for cron to be able to send emails (in fact I think I have an MTA on my router), granted for those it likely shouldn't receive emails.
       
 (DIR) Post #ATiGb57n0I8JhYGu0W by p@freespeechextremist.com
       2023-03-17T17:06:59.373012Z
       
       1 likes, 0 repeats
       
       @lanodan @Moon > Wow, I didn't except Plan9 to do it capability-style, based.Not exactly capabilities, but you can't crash the MTA and claim the port if the MTA isn't responsible for opening that port (and there's no sudo, so the MTA actually can't interfere with the port).  (The way users work is that changing users sets a flag that prevents the process's children from ever changing users.)  So it's more like inetd:  on Unix, root runs inetd, claims the ports, and then it's dup2/setuid/exec.  (If you're worried about unclaimed ports, like someone firing up an MTA on a CPU server, there's hogports, but I've never seen someone use it.)> it can be any random person on internet that managed to get some kind of exploit.If they've breached the system, they've breached the system.  If all that is running on the designated MX is the MTA, then they have to breach the MTA to get in.  If they have breached the MTA, then there's no point in further breaching the MTA, they already have it.  Port numbers don't save you, it's a superstitious holdover.> And given how things are used today, a student body or one person using npm/pip/cargo/… is quite comparable to me.That's why they get a workstation instead of a shell on the mail server.> (Should be noted that I bloody hate those dependency-installers and would ban them on things like work machines) This used to be feasible in production environments.  Maybe we can go back there some day.
       
 (DIR) Post #ATiGoZHyAJ0r1DSpwO by p@freespeechextremist.com
       2023-03-17T17:09:25.617981Z
       
       1 likes, 0 repeats
       
       @lanodan @Moon > Except nearly all Unix machines should have an MTA for cron to be able to send emailsWell, something that appends to the spool, not an open port and an MX record.
       
 (DIR) Post #ATiJ1VOa9SuacHqzxI by lanodan@queer.hacktivis.me
       2023-03-17T17:33:40.547195Z
       
       2 likes, 0 repeats
       
       @p @Moon > So it's more like inetd:  on Unix, root runs inetd, claims the ports, and then it's dup2/setuid/exec. It's passing an fd, which is one of the base of how to use true capabilities.Giving precise access to privileged data via a non-enumerable/guessable id/channels and there's no ACL/MAC/… bullshit going on.Sure Plan9 doesn't have capabilities, but wouldn't be surprising for it to be on a better track than Unixes.> If they've breached the system, they've breached the system.There's a massive difference between getting an exploit on an unprivileged process that has access to barely anything, and full SuperUser access.SuperUser can even trash your boot and peripherals software.There is failing relatively safe, and there's "Well, hopefully they didn't destroy everything".
       
 (DIR) Post #ATiM09IN8M95eAzgem by p@freespeechextremist.com
       2023-03-17T18:07:32.720108Z
       
       1 likes, 0 repeats
       
       @lanodan @Moon > There's a massive difference between getting an exploit on an unprivileged process that has access to barely anything, and full SuperUser access.I'm talking about ports, though.  There's no reason to make those ports root-only, and then you don't need to have root to open port 25.> SuperUser can even trash your boot and peripherals software.There's also no reason to have a super-user.
       
 (DIR) Post #ATiMk4rvvJEFEuWmqe by lanodan@queer.hacktivis.me
       2023-03-17T18:15:23.006528Z
       
       2 likes, 0 repeats
       
       @p @Moon >There's no reason to make those ports root-only, and then you don't need to have root to open port 25.Never said I wanted root-only, I don't want that, it's legacy crap. In fact I think root, as a user, should go away.> There's also no reason to have a super-user.Yup, but:linuxburden.jpg
       
 (DIR) Post #ATiN0AQ73Fy95dBf2e by p@freespeechextremist.com
       2023-03-17T18:18:45.210355Z
       
       0 likes, 0 repeats
       
       @lanodan @Moon > Never said I wanted root-only, I don't want that, it's legacy crap.Yeah, so...nobody needs special permissions to access a port.> In fact I think root, as a user, should go away.PROTIP:  the password is "toor".> Yup, but:Toss in a pufferfish and a daemon and whatever NetflixBSD's thing is, and the sudo sandwich while we're at it.  POSIX is the burden.
       
 (DIR) Post #ATiNW9ZDl6WDi7hR32 by nimt@cum.salon
       2023-03-17T18:24:27.863402Z
       
       4 likes, 1 repeats
       
       @p @lanodan @Moon :bullet::blood::sudo::gun:
       
 (DIR) Post #ATiO53oz74wI1fia3c by lanodan@queer.hacktivis.me
       2023-03-17T18:30:21.512668Z
       
       3 likes, 0 repeats
       
       @p @Moon >PROTIP:  the password is "toor".I've more considered locking out the root account quite few times, but I basically would just replace su(1) with doas(1) instead, which would not really change things much.> POSIX is the burdenPretty much, UNIX® is the original burden, see Plan9 APE, which is probably older than stuff like Wine or even MS-DOS compat layers.In fact I think most of my gripes with linux are with modern unixes as a whole, posix or not.Wouldn't be surprised to even remember that I gained some all the way back to when I was using OpenSolaris (I haven't used BSDs significantly, there's always at least one annoyance that makes me just go back to Linux instead).
       
 (DIR) Post #ATiOXhGg2qlSTZKG9Y by p@freespeechextremist.com
       2023-03-17T18:36:01.093566Z
       
       5 likes, 0 repeats
       
       @lanodan @Moon > UNIX® is the original burdenUNIX was a concrete system, it's not holding anyone back.  POSIX is the burden, it's the thing people have to comply with, it's the reason for the BSD sockets disaster, numeric UIDs, all things that we could have ditched by now.
       
 (DIR) Post #ATiOngJnLN5qADPF68 by a7@miss.mouse.services
       2023-03-17T18:38:51.253Z
       
       2 likes, 0 repeats
       
       @lanodan@queer.hacktivis.me @p@freespeechextremist.com @Moon@shitposter.club just boot in single user mode or set the password to password
       
 (DIR) Post #ATiOwxt7OC0HGHM4UC by lanodan@queer.hacktivis.me
       2023-03-17T18:40:09.268687Z
       
       1 likes, 0 repeats
       
       @a7 @Moon @p Opposite of my stance, well fucking done. Lurk moar.
       
 (DIR) Post #ATiPEpS9UMmsJVGBHc by sysrq@freespeechextremist.com
       2023-03-17T18:43:48.810229Z
       
       1 likes, 0 repeats
       
       @nimt @p @Moon @lanodan completely unrelated but I just remembered: for some reason, linux and it's permission crap somehow fucks with the AAlib BB demo by making it freeze when you enable music in the demo
       
 (DIR) Post #ATiPJLJIzC58H9H4Mq by lanodan@queer.hacktivis.me
       2023-03-17T18:44:13.304194Z
       
       1 likes, 0 repeats
       
       @p @Moon Well even for POSIX you can just throw it away or walk away from it, POSIX is when you care about being UNIX® certified, which basically nobody does anymore except maybe Apple for some weird reason.For example I just take POSIX as a weak portability guide for modern unixes, but I don't really care about following it for my own stuff that sometimes replaces common utilities.
       
 (DIR) Post #ATiPK3DTkDZ6Rot2OW by Moon@shitposter.club
       2023-03-17T18:44:40.350128Z
       
       1 likes, 0 repeats
       
       @lanodan @p support posix green threads and nothing else
       
 (DIR) Post #ATiPNOE05lyiTNisRk by a7@miss.mouse.services
       2023-03-17T18:45:20.452Z
       
       1 likes, 0 repeats
       
       @lanodan@queer.hacktivis.me @Moon@shitposter.club @p@freespeechextremist.com other peoples shitpost dont need to represent your stance
       
 (DIR) Post #ATiPSc5LzDZouOAXx2 by a7@miss.mouse.services
       2023-03-17T18:46:17.786Z
       
       1 likes, 0 repeats
       
       @lanodan@queer.hacktivis.me @Moon@shitposter.club @p@freespeechextremist.com either way, ya i missread considered as concerned with, chill out
       
 (DIR) Post #ATiPToDONFyaokV0kq by lanodan@queer.hacktivis.me
       2023-03-17T18:46:02.481823Z
       
       2 likes, 0 repeats
       
       @sysrq @nimt @p @Moon Works with pure ALSA, forgot why it fucks up but I think it's because it tries to attack directly to the alsa soundcard.It's demo software from ages ago and linux ecosystem doesn't cares about not breaking userspace when it comes to audio.
       
 (DIR) Post #ATiPdZxkDdXBVhq4Uy by sysrq@freespeechextremist.com
       2023-03-17T18:48:17.173392Z
       
       2 likes, 0 repeats
       
       @lanodan @Moon @nimt @p :linus::1911:
       
 (DIR) Post #ATiPoU84FRSWbTrrRQ by lanodan@queer.hacktivis.me
       2023-03-17T18:49:50.333696Z
       
       1 likes, 0 repeats
       
       @Moon @p Isn't the point of green threads to not depend on the OS/hardware?
       
 (DIR) Post #ATiQ7pI7n8vdjsnK52 by Moon@shitposter.club
       2023-03-17T18:53:40.191472Z
       
       2 likes, 0 repeats
       
       @lanodan @p your native threads can be posix threads i mean
       
 (DIR) Post #ATiQFXFqjf807FPFtg by p@freespeechextremist.com
       2023-03-17T18:55:08.771329Z
       
       5 likes, 0 repeats
       
       @lanodan @Moon Not the certification, the design.  The Linux kernel is designed around POSIX, coreutils are designed to fit into a POSIX system, glibc (and anything that is drop-in compatible) is designed to fit into POSIX; this sets an upper limit on cool shit.  And where distros break from POSIX...they decide to discard ed(1) instead of doing cool shit.  (Way to go Debian, that ed binary was taking up a lot of disk.)
       
 (DIR) Post #ATiQRQ6R9SVlPTfe2y by netdoll@rot.gives
       2023-03-17T18:57:16.442094Z
       
       1 likes, 0 repeats
       
       @p @lanodan @Moon And the few exceptions are either pure fluoride (NixOS/GuixSD) or failed to gain much traction and are consequently just limping along (GoboLinux, some others).
       
 (DIR) Post #ATiSVnyWXJsGW1Biq0 by lanodan@queer.hacktivis.me
       2023-03-17T19:20:00.933159Z
       
       1 likes, 0 repeats
       
       @p @Moon Yeah, which reminds me of being a bit annoyed about seeing so many unix-likes on osdev.org projects.But that's just the usual thing of people typically just cargo-culting known defective designs instead of actively looking around for better ones and even the rather old system that is Plan9 has a lot of better ones.Like I'm pretty sure people will copy the completely defective way linux manages namespaces and containers.As for Linux, I think it's somehow both a stick in the mud and complete chaos in terms of architecture.Like the audio stack has no stability, same for graphics and keyboard/mouse, but filesystem interface pretty much hasn't changed from the beginning, your average linux probably still borderline freezes once in a while for updating locate's database, which doesn't works for remote & ~removable filesystems.
       
 (DIR) Post #ATiTpLnL7V7ArSqBM0 by p@freespeechextremist.com
       2023-03-17T19:35:14.040592Z
       
       2 likes, 0 repeats
       
       @netdoll @Moon @lanodan I don't think it works well unless you fork the kernel, you know?  I mean, there was that statically linked suckless distro that never shipped:  even more conservative reworkings like that where they were just trying to peel back a lot of cruft and then change a few very small things, the existing system fights you the whole time.  nano9 was fun, FreeBSD kernel with P9P userspace.
       
 (DIR) Post #ATiVzjhPIb67ns95sW by netdoll@rot.gives
       2023-03-17T19:59:30.271728Z
       
       2 likes, 1 repeats
       
       @p @lanodan @Moon Yeah I mean as long as you have the 800 pound gorilla in the room there's not too much you can actually do.  Didn't hear about nano9, sounds pretty cool tbh.  It also reminds me of this https://www.tuhs.org/Archive/Distributions/Other/GUN/gun.README , Brantley Coile (then of Cisco, later of Coraid) decided to fork off Unix V7 back in the 90s and independently reimplement some of the stuff from later Research kernels in it.
       
 (DIR) Post #ATiWfur4DDc0Z5mEUK by p@freespeechextremist.com
       2023-03-17T20:07:08.638366Z
       
       2 likes, 0 repeats
       
       @lanodan @Moon > being a bit annoyed about seeing so many unix-likes on osdev.org projects"The overwhelming majority of $x is not unique" seems like...I mean, I get it, but it's also going to be the case for any value of $x.> Like I'm pretty sure people will copy the completely defective way linux manages namespaces and containers.If they understand it.  It never struck me as conceptually clean.> Like the audio stack has no stability, same for graphics and keyboard/mouseYes.> filesystem interface pretty much hasn't changed from the beginningWell, mmap() is big.  Things like that.  A lot of terrible shit has happened, a lot of weird flags, there's some awful side-channel shit in ioctl().  But mostly the filesystem interface is set because there's not a lot to improve on.  What's happened with the stuff in Linux has been kind of a mess, they're gradually bolting on things.  Plan 9's design was right:  the filesystem is just a namespace for objects that your system knows about, you hang things off it.
       
 (DIR) Post #ATiWtlVpkC1vdzRu9Q by p@freespeechextremist.com
       2023-03-17T20:09:38.812810Z
       
       1 likes, 0 repeats
       
       @netdoll @Moon @lanodan Brantley's a cool guy.  He ended up buying back Coraid.
       
 (DIR) Post #ATidjFlxb3mlzIvWXA by pro@mu.zaitcev.nu
       2023-03-17T21:26:09.213971Z
       
       1 likes, 0 repeats
       
       @Moon @p @lanodan Postifx does all that privsep stuff. You don't need to run trash like opensmtpd if you're concerned about security.
       
 (DIR) Post #ATj9Dt5h4e5RCKFDY8 by lanodan@queer.hacktivis.me
       2023-03-18T03:18:34.614071Z
       
       2 likes, 0 repeats
       
       @p @netdoll @Moon Yeah, it's why I have more interest in smaller kernels like microkernels, because there you can replace bits and pieces.
       
 (DIR) Post #ATjk1P86L7VJ6VHV2W by ignaloidas@not.acu.lt
       2023-03-18T10:11:21.664Z
       
       1 likes, 0 repeats
       
       @lanodan@queer.hacktivis.me @p@freespeechextremist.com @Moon@shitposter.club tbh on linux you can change the limit on where "unpriviledged" ports start, and you can just set that to 0 IIRC.But yeah, the whole root user stuff is bullshit.
       
 (DIR) Post #ATjrXFuyp5mVTqHM3M by Moon@shitposter.club
       2023-03-18T11:35:22.894487Z
       
       1 likes, 0 repeats
       
       @ignaloidas @lanodan @p onl inux there's also a capability that you can give to a program to let it open a specific privileged port
       
 (DIR) Post #ATjrg8HgZgkCPX8Fns by ignaloidas@not.acu.lt
       2023-03-18T11:37:09.439Z
       
       2 likes, 0 repeats
       
       @Moon@shitposter.club @lanodan@queer.hacktivis.me @p@freespeechextremist.com I guess if you wanted you could make all ports privileged and as such only allow opening ports with capabilities.Probably worth if you want to close as many doors as possible.
       
 (DIR) Post #ATjrsXRsq6pNvqokxk by lanodan@queer.hacktivis.me
       2023-03-18T11:38:58.239382Z
       
       2 likes, 0 repeats
       
       @ignaloidas @Moon @p Try all ports, it'll virtually kill your system because a lot of things love to communicate via the loopback instead of unix sockets.(It'll also kill FTP but I could see this as a good thing)
       
 (DIR) Post #ATjs2H3edQKhzc7w3M by ignaloidas@not.acu.lt
       2023-03-18T11:41:09.973Z
       
       1 likes, 0 repeats
       
       @lanodan@queer.hacktivis.me @Moon@shitposter.club @p@freespeechextremist.com I mean, if you want to do a hardened server for storing and processing sensitive stuff, I'd be fine to customize some services to talk over unix sockets or just remove them.
       
 (DIR) Post #ATjsFaI2RT2VP8CZVo by lanodan@queer.hacktivis.me
       2023-03-18T11:43:07.978299Z
       
       2 likes, 0 repeats
       
       @ignaloidas @Moon @p Yeah, like I would definitely do it on a router.But you have to be aware of the consequences and hardening quite often has weird effects that are a pain to debug.
       
 (DIR) Post #ATjsSPTByxKvbwXCls by Moon@shitposter.club
       2023-03-18T11:45:52.403848Z
       
       1 likes, 0 repeats
       
       @ignaloidas @lanodan @p it appears now you can block or allow on iptables by uid/gid. that didn't used to be possible, guess now it is. probably safer than changing the privileged port range
       
 (DIR) Post #ATjsVM0TJa69jrVLua by ignaloidas@not.acu.lt
       2023-03-18T11:46:25.067Z
       
       1 likes, 0 repeats
       
       @Moon@shitposter.club @lanodan@queer.hacktivis.me @p@freespeechextremist.com hardening brain: why not both?
       
 (DIR) Post #ATjsjMGn8Iu2bpodrE by lanodan@queer.hacktivis.me
       2023-03-18T11:48:29.587723Z
       
       2 likes, 0 repeats
       
       @Moon @p @ignaloidas You can block but you can't really allow, at least not in the same way as via capabilities.(And as said earlier, firewalls aren't failsafe, at least on linux, specially with iptables)
       
 (DIR) Post #ATjtG87qk384IXGC24 by Moon@shitposter.club
       2023-03-18T11:54:51.246753Z
       
       1 likes, 0 repeats
       
       @lanodan @p @ignaloidas what's the problem with iptables?
       
 (DIR) Post #ATjtUrf4EnBlZwp744 by lanodan@queer.hacktivis.me
       2023-03-18T11:57:05.476996Z
       
       2 likes, 0 repeats
       
       @Moon @p @ignaloidas Your network is left open if restoring the configuration fails.Which can happen for a whole bunch of reasons, for example a missing kernel module.
       
 (DIR) Post #ATk4KMxKdyOmwoZ48u by p@freespeechextremist.com
       2023-03-18T13:58:55.918435Z
       
       0 likes, 0 repeats
       
       @ignaloidas @Moon @lanodan > on linux you can change the limit on where "unpriviledged" ports start:terrythinking::terrysmoking: sysctl -a | grep -i 1024:mycomputer: blahblahblah:mycomputer: net.ipv4.ip_unprivileged_port_start = 1024:terrysmug2:When did this happen?  Last I heard it was hard-coded, but that probably would have been 4.x or 3.x.
       
 (DIR) Post #ATk4NCE2zmkeXKjNzc by ignaloidas@not.acu.lt
       2023-03-18T13:59:25.381Z
       
       1 likes, 0 repeats
       
       @p@freespeechextremist.com @Moon@shitposter.club @lanodan@queer.hacktivis.me 4.2 IIRC
       
 (DIR) Post #ATk5IE1D0BVkbTv3tw by p@freespeechextremist.com
       2023-03-18T14:09:44.963439Z
       
       0 likes, 0 repeats
       
       @lanodan @Moon @ignaloidas > Your network is left open if restoring the configuration fails.It's a second layer; you can't really base your security around it.  M&Ms.> Which can happen for a whole bunch of reasons, for example a missing kernel module. :bruceforsythe: Just press "Y" instead of "M", and you never have a missing module.
       
 (DIR) Post #ATk9HIkuItkkp36qno by lanodan@queer.hacktivis.me
       2023-03-18T14:53:49.756475Z
       
       3 likes, 0 repeats
       
       @p @ignaloidas @Moon Since 4.11 apparently: https://github.com/torvalds/linux/commit/4548b683b78137f8eadeb312b94e20bb0d4a7141
       
 (DIR) Post #ATk9qu7ZN6F2qRgc2C by lanodan@queer.hacktivis.me
       2023-03-18T15:00:21.802957Z
       
       1 likes, 0 repeats
       
       @p @ignaloidas @Moon > It's a second layer; you can't really base your security around it.  M&Ms.Which to me is a "You had one job" situation and yet another moment where the way the OS is designed is too brittle, some kind of security shouldn't accidentally fail to load.> Just press "Y" instead of "M", and you never have a missing module.That's what I do on my own kernels yeah, but I don't always have my own kernels (mostly for practical reasons, I'd hate having to cross-compile to have a solid kernel for my mips32 home router).
       
 (DIR) Post #ATkAINtInPJeze7HN2 by p@freespeechextremist.com
       2023-03-18T15:05:48.196370Z
       
       1 likes, 0 repeats
       
       @lanodan @Moon @ignaloidas That's excellent; I think "requiring the webserver to start up as root" was a bigger problem than "just open some ports wherever".
       
 (DIR) Post #ATkAtTpFh4hE77uWNU by p@freespeechextremist.com
       2023-03-18T15:12:30.439024Z
       
       0 likes, 0 repeats
       
       @lanodan @Moon @ignaloidas > Which to me is a "You had one job" situation and yet another moment where the way the OS is designed is too brittle, some kind of security shouldn't accidentally fail to load.It's not really security if you're relying on it to control access:  it's designed to shape traffic.  In terms of security, it's like an emergency brake:  if "don't leave this shit open to the world" fails, then hopefully the packet filter catches it.> That's what I do on my own kernels yeahI picked up the habit from Slackware back in The Day.  Building a new kernel is a great way to get news about what things are going on.  (Although nowadays, `make oldconfig` takes even longer than `make config` used to.  I have to just use menuconfig.)> but I don't always have my own kernels (mostly for practical reasons, I'd hate having to cross-compile to have a solid kernel for my mips32 home router)gcc sucks so hard at cross-compiling and llvm decided to copy the bugs.  Even tinycc can just give you an ARM binary out of the box.
       
 (DIR) Post #ATkB3J38c6f1aY5i4W by lanodan@queer.hacktivis.me
       2023-03-18T15:13:50.752699Z
       
       1 likes, 0 repeats
       
       @p @ignaloidas @Moon Webserver at least can probably be made reasonably secure.cups as root, which I fixed for my machine, I'd want to run away (and IIRC some filters run as root).
       
 (DIR) Post #ATkCgssxPWg7yllVaK by Moon@shitposter.club
       2023-03-18T15:32:30.586841Z
       
       1 likes, 0 repeats
       
       @p @ignaloidas @lanodan with systemd you can socket activate nginx and then put nginx into private networking so it can't talk to the outside world. obv could be an issue if you're proxying, maybe dns will still work
       
 (DIR) Post #ATkDuMK1NTVUzfPgsS by lanodan@queer.hacktivis.me
       2023-03-18T15:45:49.981208Z
       
       1 likes, 0 repeats
       
       @p @ignaloidas @Moon  > gcc sucks so hard at cross-compiling and llvm decided to copy the bugs.clang has a -target option to cross-compile if you built it to support multi-architectures, so actually it’s pretty neat (triple-based symlinks also work IIRC so you could define CC).% cat test.cint main() { return 42; }% clang -target aarch64-pc-linux-gnu -o test test.c% file testtest: ELF 64-bit LSB pie executable, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-musl-aarch64.so.1, not stripped% # Sadly I don't have qemu arm64 ready to use, I think I had some weird bugs with compiling non-native qemu recently% rsync test 192.168.0.18:% ssh 192.168.0.18pine64-rockpro64:~$ uname -aLinux pine64-rockpro64 6.0.2 #1-postmarketos-rockchip SMP PREEMPT Tue Nov 29 02:53:51 UTC 202 aarch64 Linuxpine64-rockpro64:~$ ./test ; echo $?42And as you can see it works really well in this case (it actually works if I had an arm64 library installed). :D
       
 (DIR) Post #ATkE9bVND35eQWzbGq by p@freespeechextremist.com
       2023-03-18T15:49:02.184835Z
       
       1 likes, 0 repeats
       
       @lanodan @Moon @ignaloidas > Webserver at least can probably be made reasonably secure.Webserver's an example; even if it is secure, it shouldn't need to be root to start up.> cups as rootLuckily for me, I have been able to ignore printers for years.
       
 (DIR) Post #ATkEJxQyX52NKns9Y0 by p@freespeechextremist.com
       2023-03-18T15:50:54.466989Z
       
       0 likes, 0 repeats
       
       @Moon @ignaloidas @lanodan The artificial restriction based on abundance of caution in old times (and nowadays propagated as a superstition) shouldn't exist.
       
 (DIR) Post #ATkEPO2r1MyxJaB9Em by lanodan@queer.hacktivis.me
       2023-03-18T15:51:23.970820Z
       
       1 likes, 0 repeats
       
       @p @ignaloidas @Moon> Luckily for me, I have been able to ignore printers for years.I ignored IPP for years, specially for my non-generic IPP printer, but I needed to print some concert tickets and that doesn't works via JetDirect for some reason, even though the printer advertises PCL, PostScript, …
       
 (DIR) Post #ATkEgr2cT1IIATOkjI by Moon@shitposter.club
       2023-03-18T15:54:54.850757Z
       
       1 likes, 0 repeats
       
       @p @ignaloidas @lanodan programs should have zero permissions by default and permissions, file handles, sockets should be passed in by an os launcher
       
 (DIR) Post #ATkEnMTUVlFDOW4P44 by whiteline@shitposter.club
       2023-03-18T15:56:12.978834Z
       
       2 likes, 0 repeats
       
       @Moon @p @ignaloidas @lanodan recently had to do sort of this with a program i installed via flatpack
       
 (DIR) Post #ATkFq4PeDo1wCP7z4y by p@freespeechextremist.com
       2023-03-18T16:07:54.973722Z
       
       0 likes, 0 repeats
       
       @lanodan @Moon @ignaloidas Oh, cool....So gcc is the only compiler this terrible.
       
 (DIR) Post #ATkFvLVI6ZqGebHbm4 by p@freespeechextremist.com
       2023-03-18T16:08:52.191369Z
       
       1 likes, 0 repeats
       
       @lanodan @Moon @ignaloidas DevTerm printer works.(...But eats battery like a motherfucker and appears to jam a lot.)
       
 (DIR) Post #ATkGA0gjmK6sRKd5Jg by p@freespeechextremist.com
       2023-03-18T16:11:31.204452Z
       
       1 likes, 0 repeats
       
       @Moon @ignaloidas @lanodan If everything a system has a uniform representation, that gets trivial.  Plan 9 works that way with the webserver; it builds the namespace for httpd from scratch and then closes device permissions (the only way to interact with objects outside your namespace).
       
 (DIR) Post #ATlsDyWLlniuIA34NM by zxcvfadsf@shitposter.club
       2023-03-19T10:52:44.130645Z
       
       1 likes, 0 repeats
       
       @p @lanodan @Moon Adding debian to the list of fluoridated distros
       
 (DIR) Post #ATmFjiR1PVfwcAezxY by p@freespeechextremist.com
       2023-03-19T15:16:11.429784Z
       
       1 likes, 0 repeats
       
       @zxcvfadsf @Moon @lanodan "Don't bother installing headers" and then "systemd", I already had it on there.
       
 (DIR) Post #ATmPzXzR0lTGOYwc6a by zxcvfadsf@shitposter.club
       2023-03-19T17:11:05.953316Z
       
       1 likes, 0 repeats
       
       @p @lanodan @Moon after the debuginfod thing I couldn't bear the fluoride anymore
       
 (DIR) Post #ATnCmict39tnN9uVSC by p@freespeechextremist.com
       2023-03-20T02:17:49.763475Z
       
       3 likes, 1 repeats
       
       @zxcvfadsf @Moon @lanodan Microsoft won, we've all gotta run Plan 9 now.
       
 (DIR) Post #ATnDAmdVnAv2l9g4ZM by ins0mniak@freespeechextremist.com
       2023-03-20T02:22:10.721278Z
       
       3 likes, 1 repeats
       
       @p @zxcvfadsf @Moon @lanodanBaj5eLS3KZJxLVzTYOGpHNL9_small.jpg
       
 (DIR) Post #ATnDwHzf1ZVHcfgqSe by Soy_Magnus@detroitriotcity.com
       2023-03-20T02:30:34.170970Z
       
       3 likes, 1 repeats
       
       @ins0mniak @p @lanodan @Moon @zxcvfadsf
       
 (DIR) Post #ATnGF23CiuqxaTPdfk by lanodan@queer.hacktivis.me
       2023-03-20T02:55:03.819897Z
       
       2 likes, 0 repeats
       
       @p @Moon @zxcvfadsf The Front Fell Off though
       
 (DIR) Post #ATnPuqW4tgPNZ2vnfM by p@freespeechextremist.com
       2023-03-20T04:44:57.771054Z
       
       1 likes, 0 repeats
       
       @lanodan @Moon @zxcvfadsf It was outside the environhment, though.
       
 (DIR) Post #AToQKca1WrOZ1q1ktU by errante@rapemeat.solutions
       2023-03-20T16:24:19.706501Z
       
       0 likes, 0 repeats
       
       @laura @grumpy @KayFaraday @p I hope not.
       
 (DIR) Post #AToQjipPR4FZe9C0u0 by grumpy@mirr0r.city
       2023-03-20T16:28:49.764597Z
       
       0 likes, 0 repeats
       
       @errante @KayFaraday @p @laura why are you on rms
       
 (DIR) Post #AUBX6DQXpZvhcaeWGW by p@freespeechextremist.com
       2023-03-31T19:58:31.491730Z
       
       3 likes, 1 repeats
       
       People are reposting this, this is the one with significantly less information; the update, with as much information as I have, is at https://freespeechextremist.com/notice/ATpJWnM2n3svOoJ2sS .