[XYZ] ww 🩶

my favorite game: i find your oldest github repo, open the first commit and add .patch to the url. then i look at the email you used to commit it and find all the embarrassing online profiles you made when you were 15 :Kuromi:

2026-08-21 21:11:33 GMT

- reply

i don't think the economics of that ever really work out, but even if they did, you'd just be giving your local government more power over you, and making functioning democratic institutions even less relevant to its economic and political survival. like, if not for trade, what's the point in keeping the borders open? and then later, the idea of going to war over natural resources will start to seem very reasonable, too, cause as long as you win, there's no real downsides.
it can't piggyback on the same privileged access, it works the exact same as f-droid and others

2026-08-21 20:38:15 GMT

- reply

well, yeah
i don't think all that many countries are in a position to do anything on the timeline of a few years, stuff like that takes decades, and also there's no immediate benefit and politics doesn't really work with delayed gratification
having used aurora store a bunch, i don't think the user experience is noticeably worse, but idk

2026-08-21 19:08:25 GMT

- reply

nothing stops you from running your own store, like half the phone manufacturers do. that's usually considered good enough.
i'm sure your country would gladly force you into some kinda national store if it felt like it had the political capital necessary to do that. but for now, i seriously doubt there's many countries that don't see mandatory doxxing for app developers as a welcome change. it's kinda the whole point of being a government, you track people, so you can put them in prison when you feel like it. and you try to maintain friendly relations with other governments, so they can help you with that.
idk, i honestly doubt that the phrasing of that specific part is malicious. there's plenty wrong with this change, but focusing on the prompt isn't helpful imo. i've checked the "i'm 13/16/18 years old" checkbox plenty of times before i was the specific age.

2026-08-21 18:40:58 GMT

- reply

they can still be distributed through whatever, not necessarily google play, the apk just needs to be notarized
well, it's supposed to mean the difference between doing it cause you decided to, whether it's with an instruction manual you found or not, and being told to do it over the phone or something, tbh that specific part of it kinda makes sense to me

2026-08-21 18:27:01 GMT

- reply

wdym by non-corposcum? and wdym about lies directly to the user's face?
yeah i don't expect most users to do it, but most of them don't sideload apks anyway. the question is how many of those that do will do the procedure, and how many of the open source android developers will be discouraged from making android apps because of the change. some will probably sign up and continue distributing their apks, others will be fine working for a reduced audience, some will leave. i wonder what the proportion will be.
it's the same as notarization on macos, there's precedent, so no one's gonna do anything. or kinda like verisign, if you want a .com domain, there's only one place that sells them (through resellers), and it wants to know who you are.
there's a decent amount of open source apps on macos, despite the notarization requirement, so dunno..

2026-08-21 16:14:39 GMT

No. Android remains an open ecosystem where you distribute through a variety of channels you choose and install software from multiple sources.

2026-08-16 23:37:23 GMT

- reply

amphetamine is my favorite drug but i don't know how to get it in this country, so yeah
what drugs do you like?

2026-08-16 18:58:19 GMT

- reply

depends on what you mean by psychotropic? doesn't take much pseudoephedrine for the effects to be noticeable, especially if you consume a bunch of caffeine along with it. it's kinda like a weak amphetamine that's harder on your body? can definitely improve your mood and make you chattier and such. maybe even make you horny lol. you're not gonna get anything like synesthesia or funny thought patterns like from weed though..

2026-08-14 17:06:04 GMT

- reply

no it doesn't :p

2026-08-14 16:25:59 GMT

yes! for example, right now i'm bearing the brunt of this website's bad tech decisions /lh
https://s3.us-east-2.wasabisys.com/xyzzylink-media/67f02d7ca4dcd49dad2ee99cc6dc8543798a43a591289cb77deedfcc879ce36d.png

2026-05-23 22:16:52 GMT

- reply

like, people would buy humidifiers for the winter

2026-05-23 22:16:25 GMT

- reply

wait how are mold and cold related? here mold is a huge problem, but we're near an ocean which everyone calls a river for some reason /hj, and it doesn't really get below freezing. when i lived in a colder place, the bigger winter problem was heaters drying out all the air.

2026-05-23 22:09:00 GMT

- reply

i have to wait after i turn it on, like for the fresh warm water to push all the stale now-cold water out. i don't mind it so much, cause at that point i'm not wet yet. but when it gets cold mid-shower, that's very annoying..
i've lived in only like 3 apartments with extraction fans maybe, are they for humidity? here only has a window..

2026-05-23 20:38:31 GMT

- reply

the building handles water heating, i think a tank..

2026-05-23 20:30:18 GMT

one thing i don't like about winter is that the hot tap water isn't actually all that hot in winter, and sometimes it gets straight up cold and you have to wait for it to get hot again. i have to keep the bathroom window open when i shower, otherwise it gets very humid in the entire apartment. so sometimes i end up waiting for the water to get warm, while naked, wet and cold, and i can feel the cold air from the outside too..

2026-05-20 00:44:03 GMT

k i wanted to avoid this but it's time to take pseudoephedrine.. this time, for legit medical reasons 😭

2026-05-19 00:48:13 GMT

- reply

i honestly don't see it as that big of an issue, videogames are entertainment, and there's so many of them
i think like, the money it requires is a problem, being excluded cause you don't have the hardware sucks. the e-waste is a problem. even like, preservation issues due to drm. but i don't see how kernel-level anticheat is immoral per se.

2026-05-19 00:32:47 GMT

- reply

well, okay, i don't actually play videogames that much, so i don't really know what the state of it is (nor do i actually care about controller button layouts, tho i like their shape ^^;). but for something like splatoon, so much of the game is based on the opponent being hard to see, with barely noticeable changes in the ink. the client has to know where the person is to produce those changes, so knowing the position is absolutely required. and playing against someone to whom the rules don't apply would be miserable.
i think that warrants anticheat/remote attestation. like, i think splatoon as it is would be impossible otherwise, and i think restricting how games can be made would be the wrong approach here, cause with the suggested alternatives, it would just be a different experience.

2026-05-19 00:15:03 GMT

- reply

i feel like requiring the server to calculate each player's field of view, any obstacles, fog, etc would not really work? but idk.. at the very least, it would require most modern multiplayer games to be completely rearchitected?

2026-05-19 00:11:27 GMT

- reply

neither of those does much against players who can see through walls or something like that..

2026-05-19 00:09:20 GMT

- reply

yeah but i also don't wanna play against people who move 1.5 times as fast as i do

2026-05-08 20:05:21 GMT

- reply

do you go to a cafe to write it?

2026-05-04 13:28:23 GMT

hear the rumble...

2026-02-26 06:22:58 GMT

- reply

> namespaces/schema
json-ld?
yeah i don't think matrix or activitypub are great, but both have fewer issues like that, partly cause they're younger
afaict the attack works roughly like this:
secret token is xxx
attacker sends yyy, server returns xxxyyy, compressed it's 3x3y, length = 4, can predict that there's no match
attacker sends xyy, server returns xxxxyy = 4x2y, attacker sees that length is still 4 and not 6 as expected = partial match
attacker sends xxx, server returns 6x = length unchanged = full match
if i'm not mistaken, active interference is required, and in this case it would look like a ton of spam

2026-02-26 05:29:41 GMT

- reply

oh and iirc matrix has better push? it has to be a core feature of the protocol, not an optional extension imo.

2026-02-26 05:28:52 GMT

- reply

idk i hate matrix with passion and wouldn't use it for anything. i don't think i'd trust the server to be secure, even if isolated from federation. xmpp is certainly better, but then you have to deal with bosh and xml and all that. one thing matrix got right is that json over https is the way.

2026-02-23 20:30:00 GMT

i wonder if all this matrix drama with security and spam is gonna affect their relationship with the eu

2026-02-04 00:19:47 GMT

- reply

i sleep with wife and, depending on cat's mood, cat, so i don't think that would fit the space requirements.. but i also can't imagine it being very comfortable?

2026-02-03 09:29:15 GMT

i usually sleep on my stomach and put my arms under the pillow cause it's cozy and idk what else to do with them. but that very often cuts off blood flow to my hands and i wake up from not being able to feel them. i guess the solution is probably to stop sleeping on my stomach..

2025-12-27 08:14:39 GMT

- reply

i mean, surely it can make their drones better at spotting african refugees headed towards the border, so they can be stopped before they get the chance to make a legally binding request for asylum :/ except they can't just say that on fedi, cause hopefully no one here wants that.

2025-12-27 08:02:44 GMT

- reply

yes here on fedi we're so happy to hear you list AI, Quantum, drones, and space in the same sentence

2025-12-22 00:17:40 GMT

- reply

that ram won't go in regular computers :(

2025-12-11 13:46:07 GMT

i don't understand why people region-lock their app store apps

2025-12-01 10:06:56 GMT

omfg why does the python ecosystem (if you can even call it that) have to be.. like this 😭
i wish i never had to see a single line of python or pip/poetry/uv/conda/pixi command ever again

2025-12-01 09:02:27 GMT

@npub1m96…ag4y wow you literally just put ai, green tech, deregulation and fighting disinformation all in the same post
#note1w39…plsh

2025-11-30 23:07:54 GMT

> A lost generation of news consumers? Survey shows how teenagers dislike the news media
yeah i didn't like the news when i was a teenager either. tbh i'm having a hard time trying to imagine a teenager who's just stocked to read a newspaper.

2025-11-13 01:53:31 GMT

- reply

well i'm timing it from inside js which happens after semantic analysis, but that's a one-time thing and not very interesting anyway
if i disable jit in chrome, js is fairly consistently 3 times slower than my wasm module. i don't wanna try to disable jit in firefox cause i'm worried it would break things.

2025-11-13 01:43:57 GMT

- reply

i think it compiles? wdym by fewer execution steps?

2025-11-13 01:23:13 GMT

- reply

i wrote a simple wasm program to calculate something. i really like the text representation (wat), it's so much better than real assembly languages!! but my program takes twice as much time to run as the same algorithm implemented in js 😭 and that's just the actual webassembly run time, cause i also have to encode strings into its memory using a uint8array and a textencoder, and then decode them from memory using a dataview and a textdecoder.

2025-11-13 01:16:37 GMT

i changed my mind. the webassembly text representation is the best lisp :KuromiLove:

2025-11-11 22:39:23 GMT

not all political opinions are equally valid! for example, some people believe that javascript is a bad programming language. in a perfect world, such people would be shunned and excluded from every group, and die sad and alone. unfortunately, we do not live in a perfect world.

2025-10-06 06:02:33 GMT

- reply

i usually get americanos when i want a bigger drink, cause i always feel like pour-over orders are probably very annoying and i don't like batch brew. would you rather take an order for an americano or a pour-over? is it less annoying than i think?
many cafes around also have good americano, but very bitter espresso. it feels like it's made to be mixed with either milk or water.. they also often ask me twice, like, "are you sure you know what an espresso is?"

2025-10-05 11:08:14 GMT

- reply

apple is a gatekeeper let's gatekeep them back. they should be banned from bundling safari with ios and macos. it should be paid software $50 per one-device license so that if my website doesn't work in safari i don't have to care. it would be its users' own fault!!

2025-10-05 11:05:06 GMT

safari is the worst fucking browser ever i hate safari it really is the new explorer. @npub1m96…ag4y can we please just ban safari completely and ensure the chrome monopoly please 🥺

2025-08-30 08:55:57 GMT

- reply

are you saying there's a backdoor that allows apple to cause your phone to report its location to them even if the relevant settings are disabled? based on what?

2025-08-30 08:52:33 GMT

- reply

they also don't share your location with anyone unless you explicitly enable location sharing

2025-08-30 08:47:16 GMT

- reply

the absolute majority of smartphone buyers don't care about those things. if anything they care more about being able to run their bank app and get push notifications (and on midrange to flagship phones, google/apple pay), which is often incompatible with degoogling. iphones come degoogled out of the box and have e2e encrypted backups and sync for those who care.

2025-08-30 08:23:42 GMT

- reply

what can modern android phones do that neither your first android nor a modern iphone could??

2025-08-30 08:13:35 GMT

- reply

that doesn't change the fact that there's demand for them as a phone and not just a status symbol

2025-08-30 08:02:46 GMT

- reply

well, yeah, there's a whole world outside the united states

2025-08-30 07:55:32 GMT

- reply

how do you know? fwiw most iphone users i know don't use imessage or twitter. and if you want to show off, having the latest flagship matters more than the brand.

2025-08-30 07:41:39 GMT

- reply

what kinda status symbol is a two years old phone

2025-08-30 07:30:25 GMT

- reply

fwiw they're priced more or less the same as android flagships

2025-08-30 05:17:02 GMT

i don't think people on the english-speaking internet understand that not everyone chooses their devices (like android/ios or windows/mac) solely based on their merits. for most, price is a big concern. if you only have $200 you can spend on a device, you aren't getting apple hardware. it's not a question of preference.

2025-08-26 19:52:19 GMT

"digital identities create brittle societies"
https://newdesigncongress.org/en/note/2025/the-mask-off-moment-for-digital-identity/

2025-08-18 23:05:25 GMT

cursed
https://s3.us-east-2.wasabisys.com/xyzzylink-media/50cb5d54e0d189f2add83dd23b9467b3394a172044b418ab286409fbd68d58c1.png

2025-08-14 21:45:39 GMT

- reply

nooo why would you say that. now the eu will never pass my legislation :(
yeah but what's the alternative? hosting it at home? that dramatically raises the stakes for breaking any other law whatsoever.

2025-08-14 21:30:41 GMT

- reply

i want to get @npub16c7…y433 funding to put every fedi instance in a centralized registry and have their admins install an intel sgx chip running the age verification program with remote hardware attestation. those instances that refuse will be defederated instantly and the police would be dispatched to their detected location.
speaking of which, @npub1t35…p885 i have a question. hetzner collaborates with the fbi and others to find onion services hosted on hetzner, which as i understand involves something like scanning all hetzner VMs and then looking inside those that run tor and seeing what's in memory? not exactly sure, but i was wondering if upcloud would ever do something like that?
cause if so, together we could put an end to those pesky children posting on our glorious federated universe

2025-08-14 21:20:49 GMT

- reply

the user will never be secure against the state in any meaningful way, best they can do is leave, have powerful connections, or avoid attracting attention. security and privacy are one, but not the only way to achieve the latter.

2025-08-14 21:09:50 GMT

- reply

physical security against unlawful detention is separate from computer security
yes and it's usually still better than whatever you can get otherwise

2025-08-14 21:01:42 GMT

good evening @npub16c7…y433!! i think there's a huge discrepancy!! the development of mastodon is paid for using eu funds, but there's no system for age verification built into this software!! it isn't compatible with the eu miniwallet, nor the uk selfie age checks!! and it doesn't accept credit cards either! are you going to do something about this? is there a plan? i would honestly hate to see minors on this platform. please do something asap!!

2025-08-14 20:56:15 GMT

- reply

secure from anything, unless you just don't trust people in general. like, if you had a personal whitehat team monitoring all your online and offline communications, chances are it would increase the security, at least if they're competent. but your privacy goes out of the window.
but in a more practical sense, the incentives for tech companies implementing security features and privacy-violating features are often somewhat aligned. for example, drm is generally built on the same foundation that physical hardware security is. or like, cloudflare.

2025-08-14 14:54:24 GMT

- reply

privacy often depends on security, but you can pretty much always sacrifice some privacy to improve your security too

2025-08-14 03:15:39 GMT

privacy ≠ security, they're actually often orthogonal

2025-08-12 08:46:36 GMT

- reply

i haven't been able to view age restricted videos through invidious, i think youtube requires an account and invidious proxies through a normal non-signed-in connection
so i think it's also unlikely a scraper would be able to bypass it? but i might be wrong..

2025-08-10 04:19:43 GMT

- reply

okay apparently their intelligence agencies are legally allowed to install malware (bundestrojaner) with somewhat limited capabilities (uhh..) or force a service to proxy all their traffic through the agency. there's mandatory data retention for some types of services.
if the amendments pass, then any vpn, chat apps, social networks etc will have to identify their users and follow the 6 months data retention rule. i don't understand what identify means, and apparently neither does tutanota (lol). i think it remains to be seen whether they decide to require government-issued id or only phone number verification?

2025-08-10 03:34:54 GMT

wait is it true that switzerland has some of the worst privacy laws in europe? whenever i look into it, i find very conflicting information. and now they want to force vpns to identify their users too, but that law hasn't passed yet.

2025-08-09 08:30:40 GMT

- reply

don't worry, our minds are already made up! of microplastics :Kuromi:

2025-08-09 06:42:08 GMT

- reply

oh cool, i've heard of shellcheck, but didn't know it could test for posix compliance!

2025-08-09 06:19:23 GMT

- reply

i don't write c so dunno how it works there, but with shell scripts it's kinda hard if your /bin/sh is an alias to bash and all your commands are gnu. you'd need like a chroot/lxc/docker or a vm?

2025-08-09 05:50:20 GMT

- reply

whoah someone should make that for shell scripts! maybe even with an automated scanner that detects gnu or other custom extensions in your commands and suggests posix-compatible fixes..

2025-08-08 10:17:04 GMT

> You do not have to create accounts with passwords with different actors, and can instead use the same secure solution for everyone. Like showing your ID, but digitally.
that doesn't sound very appealing tbh

2025-08-08 08:33:02 GMT

- reply

i think you can do a lot of the same things with generators?
i meant static structural typing, with generics and everything

2025-08-08 08:14:43 GMT

- reply

> though afaik Javascript doesn't even support those
mm generators? that's how async/await works..
structural typing? macros?
also jsx is homoiconic? i think? at least if you implement your own pragma for it. it's like an xml-based lisp!!

2025-08-08 07:48:40 GMT

- reply

i don't know much about self, but, there's more to it than prototypal inheritance. like continuation passing and widely used functional primitives. writing software functional style is very common, especially with jsx where you can't use control flow statements (you generally don't have to use them outside of assignment, though ternaries are sorta awkward). there's an ecosystem of libraries focused on improving that experience. obvi first class functions that you can also call and bind as pseudo currying. though you can also `const volume = x => y => z => x * y * z;`. also typescript is structural typing. ~~also there's an extensive ecosystem of macros.~~ /hj

2025-08-08 07:29:16 GMT

user was assassinated for this post

2025-08-08 07:24:41 GMT

- reply

i hate java and love lisp (javascript is the best lisp

2025-08-08 07:23:40 GMT

- reply

oh sorry i misread her post

2025-08-08 07:21:53 GMT

- reply

the opposite of kill is give birth to

2025-08-08 02:01:26 GMT

- reply

hi sodi
you won't be able to register a domain name without providing an email address, as registrars are required to collect it by §6.1.16 of the icann registration data policy (https://www.icann.org/en/contracted-parties/consensus-policies/registration-data-policy). your only option is to use a middleperson organization, such as njalla (though they require email or xmpp as well); but then the domain name wouldn't actually belong to you.
in practice, you probably don't want to do that anyway, since that email is used for notifications in case something happens to your domain. for example, if your account gets suspended, and requires immediate action to restore access to, you wouldn't be able to find out what exactly is the issue.

2025-08-05 23:47:07 GMT

- reply

which means that no large website can do it, cause anonymously hosting a clearnet site is hard and risky. so those that do exist are usually lower effort projects. also if you aren't afraid of enforcement, why block uk IPs in the first place? i'd imagine adding a banner with instructions on how to access other websites would be more effective, cause there's few sites important enough that someone would install 3rd party software to visit it, while also not having an identifiable person or entity behind it.
yeah i do hope that it gets better after it gets worse

2025-08-05 23:08:57 GMT

- reply

but it's such a good opportunity to get rid of the british in public internet spaces altogether, why would you wanna ruin the fun /j
yeah, too bad blocking british IPs and providing instructions to access the website through tor is pointless (the liability is the same as if you hadn't changed anything whatsoever)
and now that they're talking about vpns interfering with the state's ability to enforce its laws, i wonder how long till they criminalize tor use x.x

2025-08-05 22:23:57 GMT

the uk law is a good excuse for the anti-british xenophobes to really ramp up their exclusion of the british 🙃

2025-08-05 21:22:56 GMT

https://eur-lex.europa.eu/eli/reg/2024/1183/oj/eng#045.001
45.1. Qualified certificates for website authentication shall meet the requirements laid down in Annex IV. [...]
45.1a. Qualified certificates for website authentication issued in accordance with paragraph 1 of this Article shall be recognised by providers of web-browsers. Providers of web-browsers shall ensure that the identity data attested in the certificate and additional attested attributes are displayed in a user-friendly manner. [...]
45.1b. Qualified certificates for website authentication shall not be subject to any mandatory requirements other than the requirements laid down in paragraph 1.
this is the law that's been passed and should be in power now? the eu wants to force web browsers to:
- trust eidas certificate authorities
- revert to prominently displaying extended validation data
- *not* require certificate transparency on european certificates!!!!
the practical implications:
- any eu state can issue a valid certificate for any website
- it is illegal for a browser vendor to reject it
- without certificate transparency, it would be undetectable; even if there's an eu-wide registry (is there?), nothing stops them from not adding the cert to it (whereas ct is enforced)
- this enables mitm at the isp level across the eu; basically eu countries can view any of their residents' browser traffic if they want
please tell me i misunderstood the law?

2025-08-05 10:06:32 GMT

- reply

they use the title attribute for the jokes (that's what appears on hover), alt is set to the title of the comic (completely useless, probably meant to suppress warnings)

2025-08-05 10:02:35 GMT

who up winning they rar

2025-08-05 09:54:24 GMT

til that the eu wanted to force web browsers to trust the root authorities for their "qualified" ev tls certificates? and afaict the requirement is still there? does anyone know what happened to that?
https://www.eff.org/deeplinks/2022/12/eidas-20-sets-dangerous-precedent-web-security
https://eur-lex.europa.eu/eli/reg/2024/1183/oj/eng#045.001

2025-08-04 10:43:31 GMT

- reply

in that case there should be no issues with implementing webrtc or plain http for clearnet web clients and whatever else for those who have tor/i2p, cause they have to install an app anyway and probably enough of them can relay stuff to web users
websockets would be better but i just realized they might require https?

2025-08-04 10:33:00 GMT

- reply

like, i don't think relay-capable users should have to hide their relay identity, it can be completely separate from the name they post under

2025-08-04 10:32:12 GMT

- reply

as much as i agree about tor/i2p, i wouldn't join a social network that heavily relies on those. so far in my experience those tend not to attract the kinda people i'd want to interact with.
you could implement privacy mechanisms over clearnet, but it would probably be kinda painful..

2025-08-04 10:23:38 GMT

- reply

ohh
i don't think that can be solved as long as the server identity is tied to its domain huh

2025-08-04 10:06:15 GMT

- reply

mechanisms?
fwiw the ap spec is very barebones, iirc it only suggests using http signatures, but doesn't include any security by itself?

2025-08-04 10:04:46 GMT

- reply

i think they need to have public IPs and open ports
eh i don't think it's inherently a js issue, and i'd prefer a network that uses webrtc or websockets and works in the browser. those peers that run native apps can relay messages for those that don't, but most people aren't gonna install an app. if there even is one for their platform.
my issue with ssb was that their npm was hosted on ssb itself, which is pretty cool in theory, but needing a well-synced client before you can download the client you like is a bit of a chicken and egg problem (aside from being extremely user-unfriendly)

2025-08-04 09:54:32 GMT

- reply

akkoma has built in backup?