[XYZ] ww 🩶

https://xyzzy.link/users/ww

pronoun: she
pronombre: ella
homepage: https://effervescent.neocities.org

Public Key

npub16ygedl8xdtcpk5aq9p8xmj5af082hy0c6ra27n6lpm3vs2s85n7s3fsulz

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsdzyvklnnx4uqm2wszsnnde2w5hn4tj8udp740fa0sackg9gr6flgprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntne4tq3

Publishing to

relay.momostr.pink

Author Public Key

npub16ygedl8xdtcpk5aq9p8xmj5af082hy0c6ra27n6lpm3vs2s85n7s3fsulz

Show more details

Last Notes

2026-09-04 21:18:01 GMT

Your Personal Info Is Being Sold Right Now
Hundreds of data brokers make their money selling pieces of your life — your home address, your phone number, who's in your family — to anyone who'll pay for it. That data doesn't stay harmless once it's out there. A phone number can end up fueling SIM-swapping and emptied bank accounts. A home address can end up bringing a swatting call, a stalker, or a stranger at your door.

2026-09-04 19:49:37 GMT

- reply

like, i get it for b2b, kinda makes sense. if you're big enough or the company you're contracting is small enough, you might actually wanna talk to sales and see if they can get you in touch with the actual dev team, maybe give you a special offer, add some of the features you want to the backlog. but when it's a consumer product, the interaction is a formality, there's nothing useful that could possibly happen on that call.

2026-09-04 19:46:59 GMT

i don't get how companies whose sales model is "leave a number on our website and we'll call you" stay in business, especially when every single one of their competitors has online checkout with no human interaction required

2026-08-30 08:08:43 GMT

- reply

good question!

2026-08-30 07:19:58 GMT

- reply

am on macos

2026-08-30 06:35:54 GMT

i have 4 tabs open i need to close some

2026-08-29 05:23:34 GMT

what would an elephant do

2026-08-28 03:42:00 GMT

- reply

like when? and also, not that many 15 year olds actively care about their future job prospects..

2026-08-28 03:04:29 GMT

my favorite game: i find your oldest github repo, open the first commit and add .patch to the url. then i look at the email you used to commit it and find all the embarrassing online profiles you made when you were 15 :Kuromi:

2026-08-21 21:11:33 GMT

- reply

i don't think the economics of that ever really work out, but even if they did, you'd just be giving your local government more power over you, and making functioning democratic institutions even less relevant to its economic and political survival. like, if not for trade, what's the point in keeping the borders open? and then later, the idea of going to war over natural resources will start to seem very reasonable, too, cause as long as you win, there's no real downsides.
it can't piggyback on the same privileged access, it works the exact same as f-droid and others

2026-08-21 20:38:15 GMT

- reply

well, yeah
i don't think all that many countries are in a position to do anything on the timeline of a few years, stuff like that takes decades, and also there's no immediate benefit and politics doesn't really work with delayed gratification
having used aurora store a bunch, i don't think the user experience is noticeably worse, but idk

2026-08-21 19:45:25 GMT

- reply

not an improvement, but it is what would most likely happen
you can't really do that if you want to maintain trade relations with the us, and you really do want to maintain them, thanks to germany and a few other countries
you don't have to build a system image, wdym? like, all you have to do is install an apk, they're even going to be available through google play store soon. it's just you have no real chance at competing commercially unless it comes preinstalled on the phone, so you more or less have to be a phone manufacturer. but that's kinda natural.

2026-08-21 19:08:25 GMT

- reply

nothing stops you from running your own store, like half the phone manufacturers do. that's usually considered good enough.
i'm sure your country would gladly force you into some kinda national store if it felt like it had the political capital necessary to do that. but for now, i seriously doubt there's many countries that don't see mandatory doxxing for app developers as a welcome change. it's kinda the whole point of being a government, you track people, so you can put them in prison when you feel like it. and you try to maintain friendly relations with other governments, so they can help you with that.
idk, i honestly doubt that the phrasing of that specific part is malicious. there's plenty wrong with this change, but focusing on the prompt isn't helpful imo. i've checked the "i'm 13/16/18 years old" checkbox plenty of times before i was the specific age.

2026-08-21 18:52:19 GMT

- reply

i imagine every localization will have its own prompt
yeah, it sucks, but like, no one’s gonna do anything, and it’s still open enough that it’s hard to argue that it’s anticompetitive

2026-08-21 18:40:58 GMT

- reply

they can still be distributed through whatever, not necessarily google play, the apk just needs to be notarized
well, it's supposed to mean the difference between doing it cause you decided to, whether it's with an instruction manual you found or not, and being told to do it over the phone or something, tbh that specific part of it kinda makes sense to me

2026-08-21 18:27:01 GMT

- reply

wdym by non-corposcum? and wdym about lies directly to the user's face?
yeah i don't expect most users to do it, but most of them don't sideload apks anyway. the question is how many of those that do will do the procedure, and how many of the open source android developers will be discouraged from making android apps because of the change. some will probably sign up and continue distributing their apks, others will be fine working for a reduced audience, some will leave. i wonder what the proportion will be.
it's the same as notarization on macos, there's precedent, so no one's gonna do anything. or kinda like verisign, if you want a .com domain, there's only one place that sells them (through resellers), and it wants to know who you are.
there's a decent amount of open source apps on macos, despite the notarization requirement, so dunno..

2026-08-21 16:14:39 GMT

No. Android remains an open ecosystem where you distribute through a variety of channels you choose and install software from multiple sources.

2026-08-18 17:38:52 GMT

- reply

please don't do that cowinka

2026-08-18 17:01:38 GMT

- reply

play war games, win war prizes?

2026-08-18 17:00:10 GMT

play free online games, win free online prizes

2026-08-16 23:37:23 GMT

- reply

amphetamine is my favorite drug but i don't know how to get it in this country, so yeah
what drugs do you like?

2026-08-16 18:58:19 GMT

- reply

depends on what you mean by psychotropic? doesn't take much pseudoephedrine for the effects to be noticeable, especially if you consume a bunch of caffeine along with it. it's kinda like a weak amphetamine that's harder on your body? can definitely improve your mood and make you chattier and such. maybe even make you horny lol. you're not gonna get anything like synesthesia or funny thought patterns like from weed though..

2026-08-14 17:24:56 GMT

- reply

yeah but that's only half the problem!

2026-08-14 17:06:04 GMT

- reply

no it doesn't :p

2026-08-14 16:25:59 GMT

yes! for example, right now i'm bearing the brunt of this website's bad tech decisions /lh
https://s3.us-east-2.wasabisys.com/xyzzylink-media/67f02d7ca4dcd49dad2ee99cc6dc8543798a43a591289cb77deedfcc879ce36d.png

2026-06-11 14:45:49 GMT

- reply

yeah you have to change it each time you switch to another language, but like it's really hard in both akkoma fe and phanpy, i wish i could manually set the list of language displayed in the dropdown in the compose box
and yeah idk what about multilanguage posts

2026-06-11 13:57:00 GMT

i've been trying to use post language tags correctly but honestly the whole fedi ecosystem goes against it and it's also against the way humans talk and i think the real problem is mastodon and the fact that it trusts those stupid tags. it should detect the language instead. and its autotranslate feature should allow the user to translate anything into anything, with auto -> ui language being the default, but overridable setting.

2026-05-23 22:16:52 GMT

- reply

like, people would buy humidifiers for the winter

2026-05-23 22:16:25 GMT

- reply

wait how are mold and cold related? here mold is a huge problem, but we're near an ocean which everyone calls a river for some reason /hj, and it doesn't really get below freezing. when i lived in a colder place, the bigger winter problem was heaters drying out all the air.

2026-05-23 22:09:00 GMT

- reply

i have to wait after i turn it on, like for the fresh warm water to push all the stale now-cold water out. i don't mind it so much, cause at that point i'm not wet yet. but when it gets cold mid-shower, that's very annoying..
i've lived in only like 3 apartments with extraction fans maybe, are they for humidity? here only has a window..

2026-05-23 20:38:31 GMT

- reply

the building handles water heating, i think a tank..

2026-05-23 20:30:18 GMT

one thing i don't like about winter is that the hot tap water isn't actually all that hot in winter, and sometimes it gets straight up cold and you have to wait for it to get hot again. i have to keep the bathroom window open when i shower, otherwise it gets very humid in the entire apartment. so sometimes i end up waiting for the water to get warm, while naked, wet and cold, and i can feel the cold air from the outside too..

2026-05-20 02:28:44 GMT

- reply

oh.. n95 isn't so bad, i just thought they'd let pollen through. but last time i wore one, people looked at me weird, so i don't wanna do that again.
interesting, i didn't know mold could grow on fallen leaves

2026-05-20 02:16:23 GMT

- reply

as in, a gas mask? i can't, i would die of social anxiety, and on a bicycle i'd suffocate in one..
but also i'm allergic to like about everything so idk if it's pollen or not anyway. it's almost winter so i'd assume there isn't much pollen in the air..

2026-05-20 00:44:03 GMT

k i wanted to avoid this but it's time to take pseudoephedrine.. this time, for legit medical reasons 😭

2026-05-19 00:48:13 GMT

- reply

i honestly don't see it as that big of an issue, videogames are entertainment, and there's so many of them
i think like, the money it requires is a problem, being excluded cause you don't have the hardware sucks. the e-waste is a problem. even like, preservation issues due to drm. but i don't see how kernel-level anticheat is immoral per se.

2026-05-19 00:41:21 GMT

- reply

i dunno, the way it plays would still be fairly different, the community would be different, and so you'd be making the experience of a game like splatoon illegal, which i don't think is the solution

2026-05-19 00:32:47 GMT

- reply

well, okay, i don't actually play videogames that much, so i don't really know what the state of it is (nor do i actually care about controller button layouts, tho i like their shape ^^;). but for something like splatoon, so much of the game is based on the opponent being hard to see, with barely noticeable changes in the ink. the client has to know where the person is to produce those changes, so knowing the position is absolutely required. and playing against someone to whom the rules don't apply would be miserable.
i think that warrants anticheat/remote attestation. like, i think splatoon as it is would be impossible otherwise, and i think restricting how games can be made would be the wrong approach here, cause with the suggested alternatives, it would just be a different experience.

2026-05-19 00:15:03 GMT

- reply

i feel like requiring the server to calculate each player's field of view, any obstacles, fog, etc would not really work? but idk.. at the very least, it would require most modern multiplayer games to be completely rearchitected?

2026-05-19 00:11:27 GMT

- reply

neither of those does much against players who can see through walls or something like that..

2026-05-19 00:09:20 GMT

- reply

yeah but i also don't wanna play against people who move 1.5 times as fast as i do

2026-05-08 20:05:21 GMT

- reply

do you go to a cafe to write it?

2026-05-04 13:28:23 GMT

hear the rumble...

2026-02-26 06:22:58 GMT

- reply

> namespaces/schema
json-ld?
yeah i don't think matrix or activitypub are great, but both have fewer issues like that, partly cause they're younger
afaict the attack works roughly like this:
secret token is xxx
attacker sends yyy, server returns xxxyyy, compressed it's 3x3y, length = 4, can predict that there's no match
attacker sends xyy, server returns xxxxyy = 4x2y, attacker sees that length is still 4 and not 6 as expected = partial match
attacker sends xxx, server returns 6x = length unchanged = full match
if i'm not mistaken, active interference is required, and in this case it would look like a ton of spam

2026-02-26 05:29:41 GMT

- reply

oh and iirc matrix has better push? it has to be a core feature of the protocol, not an optional extension imo.

2026-02-26 05:28:52 GMT

- reply

idk i hate matrix with passion and wouldn't use it for anything. i don't think i'd trust the server to be secure, even if isolated from federation. xmpp is certainly better, but then you have to deal with bosh and xml and all that. one thing matrix got right is that json over https is the way.

2026-02-23 20:30:00 GMT

i wonder if all this matrix drama with security and spam is gonna affect their relationship with the eu

2026-02-04 00:19:47 GMT

- reply

i sleep with wife and, depending on cat's mood, cat, so i don't think that would fit the space requirements.. but i also can't imagine it being very comfortable?

2026-02-03 09:29:15 GMT

i usually sleep on my stomach and put my arms under the pillow cause it's cozy and idk what else to do with them. but that very often cuts off blood flow to my hands and i wake up from not being able to feel them. i guess the solution is probably to stop sleeping on my stomach..

2025-12-27 08:14:39 GMT

- reply

i mean, surely it can make their drones better at spotting african refugees headed towards the border, so they can be stopped before they get the chance to make a legally binding request for asylum :/ except they can't just say that on fedi, cause hopefully no one here wants that.

2025-12-27 08:02:44 GMT

- reply

yes here on fedi we're so happy to hear you list AI, Quantum, drones, and space in the same sentence

2025-12-22 00:17:40 GMT

- reply

that ram won't go in regular computers :(

2025-12-11 13:46:07 GMT

i don't understand why people region-lock their app store apps

2025-12-01 10:06:56 GMT

omfg why does the python ecosystem (if you can even call it that) have to be.. like this 😭
i wish i never had to see a single line of python or pip/poetry/uv/conda/pixi command ever again

2025-12-01 09:02:27 GMT

@npub1m96…ag4y wow you literally just put ai, green tech, deregulation and fighting disinformation all in the same post
#note1w39…plsh

2025-11-30 23:07:54 GMT

> A lost generation of news consumers? Survey shows how teenagers dislike the news media
yeah i didn't like the news when i was a teenager either. tbh i'm having a hard time trying to imagine a teenager who's just stocked to read a newspaper.

2025-11-13 01:53:31 GMT

- reply

well i'm timing it from inside js which happens after semantic analysis, but that's a one-time thing and not very interesting anyway
if i disable jit in chrome, js is fairly consistently 3 times slower than my wasm module. i don't wanna try to disable jit in firefox cause i'm worried it would break things.

2025-11-13 01:43:57 GMT

- reply

i think it compiles? wdym by fewer execution steps?

2025-11-13 01:23:13 GMT

- reply

i wrote a simple wasm program to calculate something. i really like the text representation (wat), it's so much better than real assembly languages!! but my program takes twice as much time to run as the same algorithm implemented in js 😭 and that's just the actual webassembly run time, cause i also have to encode strings into its memory using a uint8array and a textencoder, and then decode them from memory using a dataview and a textdecoder.

2025-11-13 01:16:37 GMT

i changed my mind. the webassembly text representation is the best lisp :KuromiLove:

2025-11-11 22:39:23 GMT

not all political opinions are equally valid! for example, some people believe that javascript is a bad programming language. in a perfect world, such people would be shunned and excluded from every group, and die sad and alone. unfortunately, we do not live in a perfect world.

2025-10-06 06:02:33 GMT

- reply

i usually get americanos when i want a bigger drink, cause i always feel like pour-over orders are probably very annoying and i don't like batch brew. would you rather take an order for an americano or a pour-over? is it less annoying than i think?
many cafes around also have good americano, but very bitter espresso. it feels like it's made to be mixed with either milk or water.. they also often ask me twice, like, "are you sure you know what an espresso is?"

2025-10-05 11:08:14 GMT

- reply

apple is a gatekeeper let's gatekeep them back. they should be banned from bundling safari with ios and macos. it should be paid software $50 per one-device license so that if my website doesn't work in safari i don't have to care. it would be its users' own fault!!

2025-10-05 11:05:06 GMT

safari is the worst fucking browser ever i hate safari it really is the new explorer. @npub1m96…ag4y can we please just ban safari completely and ensure the chrome monopoly please 🥺

2025-08-30 08:55:57 GMT

- reply

are you saying there's a backdoor that allows apple to cause your phone to report its location to them even if the relevant settings are disabled? based on what?

2025-08-30 08:52:33 GMT

- reply

they also don't share your location with anyone unless you explicitly enable location sharing

2025-08-30 08:47:16 GMT

- reply

the absolute majority of smartphone buyers don't care about those things. if anything they care more about being able to run their bank app and get push notifications (and on midrange to flagship phones, google/apple pay), which is often incompatible with degoogling. iphones come degoogled out of the box and have e2e encrypted backups and sync for those who care.

2025-08-30 08:23:42 GMT

- reply

what can modern android phones do that neither your first android nor a modern iphone could??

2025-08-30 08:13:35 GMT

- reply

that doesn't change the fact that there's demand for them as a phone and not just a status symbol

2025-08-30 08:02:46 GMT

- reply

well, yeah, there's a whole world outside the united states

2025-08-30 07:55:32 GMT

- reply

how do you know? fwiw most iphone users i know don't use imessage or twitter. and if you want to show off, having the latest flagship matters more than the brand.

2025-08-30 07:41:39 GMT

- reply

what kinda status symbol is a two years old phone

2025-08-30 07:30:25 GMT

- reply

fwiw they're priced more or less the same as android flagships

2025-08-30 05:17:02 GMT

i don't think people on the english-speaking internet understand that not everyone chooses their devices (like android/ios or windows/mac) solely based on their merits. for most, price is a big concern. if you only have $200 you can spend on a device, you aren't getting apple hardware. it's not a question of preference.

2025-08-26 19:52:19 GMT

"digital identities create brittle societies"
https://newdesigncongress.org/en/note/2025/the-mask-off-moment-for-digital-identity/

2025-08-18 23:05:25 GMT

cursed
https://s3.us-east-2.wasabisys.com/xyzzylink-media/50cb5d54e0d189f2add83dd23b9467b3394a172044b418ab286409fbd68d58c1.png

2025-08-14 21:45:39 GMT

- reply

nooo why would you say that. now the eu will never pass my legislation :(
yeah but what's the alternative? hosting it at home? that dramatically raises the stakes for breaking any other law whatsoever.

2025-08-14 21:30:41 GMT

- reply

i want to get @npub16c7…y433 funding to put every fedi instance in a centralized registry and have their admins install an intel sgx chip running the age verification program with remote hardware attestation. those instances that refuse will be defederated instantly and the police would be dispatched to their detected location.
speaking of which, @npub1t35…p885 i have a question. hetzner collaborates with the fbi and others to find onion services hosted on hetzner, which as i understand involves something like scanning all hetzner VMs and then looking inside those that run tor and seeing what's in memory? not exactly sure, but i was wondering if upcloud would ever do something like that?
cause if so, together we could put an end to those pesky children posting on our glorious federated universe

2025-08-14 21:20:49 GMT

- reply

the user will never be secure against the state in any meaningful way, best they can do is leave, have powerful connections, or avoid attracting attention. security and privacy are one, but not the only way to achieve the latter.

2025-08-14 21:09:50 GMT

- reply

physical security against unlawful detention is separate from computer security
yes and it's usually still better than whatever you can get otherwise

2025-08-14 21:01:42 GMT

good evening @npub16c7…y433!! i think there's a huge discrepancy!! the development of mastodon is paid for using eu funds, but there's no system for age verification built into this software!! it isn't compatible with the eu miniwallet, nor the uk selfie age checks!! and it doesn't accept credit cards either! are you going to do something about this? is there a plan? i would honestly hate to see minors on this platform. please do something asap!!

2025-08-14 20:56:15 GMT

- reply

secure from anything, unless you just don't trust people in general. like, if you had a personal whitehat team monitoring all your online and offline communications, chances are it would increase the security, at least if they're competent. but your privacy goes out of the window.
but in a more practical sense, the incentives for tech companies implementing security features and privacy-violating features are often somewhat aligned. for example, drm is generally built on the same foundation that physical hardware security is. or like, cloudflare.

2025-08-14 14:54:24 GMT

- reply

privacy often depends on security, but you can pretty much always sacrifice some privacy to improve your security too

2025-08-14 03:15:39 GMT

privacy ≠ security, they're actually often orthogonal

2025-08-12 08:46:36 GMT

- reply

i haven't been able to view age restricted videos through invidious, i think youtube requires an account and invidious proxies through a normal non-signed-in connection
so i think it's also unlikely a scraper would be able to bypass it? but i might be wrong..

2025-08-10 04:19:43 GMT

- reply

okay apparently their intelligence agencies are legally allowed to install malware (bundestrojaner) with somewhat limited capabilities (uhh..) or force a service to proxy all their traffic through the agency. there's mandatory data retention for some types of services.
if the amendments pass, then any vpn, chat apps, social networks etc will have to identify their users and follow the 6 months data retention rule. i don't understand what identify means, and apparently neither does tutanota (lol). i think it remains to be seen whether they decide to require government-issued id or only phone number verification?

2025-08-10 03:34:54 GMT

wait is it true that switzerland has some of the worst privacy laws in europe? whenever i look into it, i find very conflicting information. and now they want to force vpns to identify their users too, but that law hasn't passed yet.

2025-08-09 08:30:40 GMT

- reply

don't worry, our minds are already made up! of microplastics :Kuromi:

2025-08-09 06:42:08 GMT

- reply

oh cool, i've heard of shellcheck, but didn't know it could test for posix compliance!

2025-08-09 06:19:23 GMT

- reply

i don't write c so dunno how it works there, but with shell scripts it's kinda hard if your /bin/sh is an alias to bash and all your commands are gnu. you'd need like a chroot/lxc/docker or a vm?

2025-08-09 05:50:20 GMT

- reply

whoah someone should make that for shell scripts! maybe even with an automated scanner that detects gnu or other custom extensions in your commands and suggests posix-compatible fixes..

2025-08-08 10:17:04 GMT

> You do not have to create accounts with passwords with different actors, and can instead use the same secure solution for everyone. Like showing your ID, but digitally.
that doesn't sound very appealing tbh

2025-08-08 08:33:02 GMT

- reply

i think you can do a lot of the same things with generators?
i meant static structural typing, with generics and everything

2025-08-08 08:14:43 GMT

- reply

> though afaik Javascript doesn't even support those
mm generators? that's how async/await works..
structural typing? macros?
also jsx is homoiconic? i think? at least if you implement your own pragma for it. it's like an xml-based lisp!!

2025-08-08 07:48:40 GMT

- reply

i don't know much about self, but, there's more to it than prototypal inheritance. like continuation passing and widely used functional primitives. writing software functional style is very common, especially with jsx where you can't use control flow statements (you generally don't have to use them outside of assignment, though ternaries are sorta awkward). there's an ecosystem of libraries focused on improving that experience. obvi first class functions that you can also call and bind as pseudo currying. though you can also `const volume = x => y => z => x * y * z;`. also typescript is structural typing. ~~also there's an extensive ecosystem of macros.~~ /hj

2025-08-08 07:29:16 GMT

user was assassinated for this post

2025-08-08 07:24:41 GMT

- reply

i hate java and love lisp (javascript is the best lisp

2025-08-08 07:23:40 GMT

- reply

oh sorry i misread her post

2025-08-08 07:21:53 GMT

- reply

the opposite of kill is give birth to

2025-08-08 02:01:26 GMT

- reply

hi sodi
you won't be able to register a domain name without providing an email address, as registrars are required to collect it by §6.1.16 of the icann registration data policy (https://www.icann.org/en/contracted-parties/consensus-policies/registration-data-policy). your only option is to use a middleperson organization, such as njalla (though they require email or xmpp as well); but then the domain name wouldn't actually belong to you.
in practice, you probably don't want to do that anyway, since that email is used for notifications in case something happens to your domain. for example, if your account gets suspended, and requires immediate action to restore access to, you wouldn't be able to find out what exactly is the issue.