iam-py-test :transgender_flag: :neocat_flag_lesbian:

Pre-transition trans girl interested in cybersecurity, content filtering, and law. Assistant maintainer of the Actually Legitimate URL Shortener. Trekkie.
Not legal/medical advice.

Profile picture: truncated screenshot of a WINE error message. The error message is titled "Download failed". The message reads "Download Failed: Success. Check your connection and click 'Retry' to try downloading the files again, or click 'Next' to continue installing anyway." There is only one button labeled "OK".

Header image: A Windows error message against the default Windows wallpaper. The error message reads "Windows cannot find iam-py-test. Make sure you typed the name correctly, and then try again."

Alts: [@iam_py_test](https://mstdn.social/@iam_py_test ) iam-py-test :transgender: (npub1lll…hk08) iampytest (npub1r77…pr9z)

About me: https://iam-py-test.github.io/about.html
GitHub: https://github.com/iam-py-test
Pronouns: she/her
Dream job title: Head of Security and Hacking (legal and ethical)
Testing this out: iam-py-test :transgender_flag: :neocat_flag_lesbian: (npub1d98…wdy6)">https://justmytoots.com/iam-py-test :transgender_flag: :neocat_flag_lesbian: (npub1d98…wdy6)

Public Key

npub1d98hr3vftrx8l9fsqpvez83vwxdez902c3xucf43swsn85397v8qdpwdy6

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsxjnm3cky43nrlj5cqqkv3rck8rxu3zh4vgnwvy6cc8gfn6gjlxrsprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqy8hwumn8ghj7mn0wd68ytnddaksla0n5k

Publishing to

relay.momostr.pink

nostr.mom

relay.damus.io

Author Public Key

npub1d98hr3vftrx8l9fsqpvez83vwxdez902c3xucf43swsn85397v8qdpwdy6

Show more details

Published at

2026-07-08T04:34:22Z

Kind type

0 Metadata

Event JSON

{ "id": "f2ae3104035d35c0d8c5faaaabc9bf3cd4bafc0ede6926bb074e5cde2515d73a", "pubkey": "694f71c58958cc7f95300059911e2c719b9115eac44dcc26b183a133d225f30e", "created_at": 1783485262, "kind": 0, "tags": [ [ "emoji", "transgender_flag", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/028/459/original/e0b74b985a033b07.png" ], [ "emoji", "neocat_flag_lesbian", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/468/760/original/088ec593d4980c94.png" ], [ "proxy", "https://infosec.exchange/users/iampytest1", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/iampytest1", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"iam-py-test :transgender_flag: :neocat_flag_lesbian:\",\"about\":\"Pre-transition trans girl interested in cybersecurity, content filtering, and law. Assistant maintainer of the Actually Legitimate URL Shortener. Trekkie.\\nNot legal/medical advice.\\n\\nProfile picture: truncated screenshot of a WINE error message. The error message is titled \\\"Download failed\\\". The message reads \\\"Download Failed: Success. Check your connection and click 'Retry' to try downloading the files again, or click 'Next' to continue installing anyway.\\\" There is only one button labeled \\\"OK\\\".\\n\\nHeader image: A Windows error message against the default Windows wallpaper. The error message reads \\\"Windows cannot find iam-py-test. Make sure you typed the name correctly, and then try again.\\\"\\n\\nAlts: [@iam_py_test](https://mstdn.social/@iam_py_test ) nostr:npub1lllyc746xfhea5y8fgapae8c7ulxatlkmf8fnk3j0szrammha2qqahhk08 nostr:npub1r773kksm3uu0py3aftm32m9ctte03lryjugve6026nlqc5xfhezsuzpr9z\\n\\nAbout me: https://iam-py-test.github.io/about.html\\nGitHub: https://github.com/iam-py-test\\nPronouns: she/her\\nDream job title: Head of Security and Hacking (legal and ethical)\\nTesting this out: https://justmytoots.com/nostr:npub1d98hr3vftrx8l9fsqpvez83vwxdez902c3xucf43swsn85397v8qdpwdy6\\n\",\"website\":\"https://infosec.exchange/@iampytest1\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/110/142/785/240/828/479/original/2e987e586e93f8ce.png\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/110/142/785/240/828/479/original/a71c82353d5441da.png\",\"nip05\":\"[email protected]\"}", "sig": "965f4fb1f52d600578c9134b224ad527116c9e4c0d730d7ccf6fb33b11ea273b8f0bc1d24cef253bbf498dae6067ea23f2828da87299967e4e6f43d892a0dfa4" }

Last Notes

2026-06-30 16:07:54 GMT

- reply

uBlock Origin's badware list has specific filters to protect against ClickFix: https://github.com/uBlockOrigin/uAssets/blob/30fba85746695c324fe1f6bed9243ca5f46bd675/filters/badware.txt#L2611
I don't know how well they work.

2026-06-20 12:56:11 GMT

- reply

Now with alt text
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/782/535/278/609/242/original/3e03f7fae2a86b88.png

2026-06-18 00:56:46 GMT

- reply

Edit: I retract the statements made in this post, as they lack a factual basis
@npub16rn…um5p @npub1vc3…axsh it's unfortunate, since there *are* legitimate people in Gaza seeking aid.However, I've seen many Gaza Verified accounts which act extremely suspicious or outright spam, such as the one in the original post.Gaza Verified sounds like it is well intended, and they say they do checks, so I don't know why so many suspicious accounts are approved (as in actually listed on their website; anyone can put whatever in their profile).It's hard to <em>prove</em> these accounts are fake.

2026-06-18 00:25:39 GMT

- reply

The top two are obviously fake, and the bottom one looks to be a scammer who unfortunately is taking advantage of the Gaza genocide and somehow tricked Gaza Verified.
What's wrong with the second to last one? Looks like a real person who happened to be mistakenly flagged: https://gaygeek.social/@awildfaerie

2026-06-08 05:29:25 GMT

- reply

I wonder what their standing theory is. Ascetic injury like in the ballroom case?
I imagine standing will be an issue, but I haven't read the complaint so maybe they have a strong argument.

2026-06-05 19:37:18 GMT

Poll: Is it ethical for journalists to bypass paywalls on other news sites while researching a story?
Moreover, how would learning a journalist used a tool to read paywalled articles impact your perception of their credibility?
As in, you may think a journalist acted unethically but is still reporting accurate information in an unbiased matter. Can ethics be separated from credibility?
Please read all answers before selecting one.
#Ethics #JournalisticEthics #Poll

2026-06-05 13:13:04 GMT

- reply

Could they have meant to link to https://chromereleases.googleblog.com/2026/06/chrome-dev-for-desktop-update_02087761502.html

2026-06-05 13:11:34 GMT

- reply

It looks like the article *had* content which was removed: https://web.archive.org/web/20260603221037/https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html

2026-05-18 13:55:41 GMT

313 Team says it has launched a DDoS attack against Microsoft Power BI. 313 Team says their attack impacted "the website, application, and login interface".
Power BI's website appears online, but is slow to load.
#Microsoft #PowerBi #313Team

2026-05-04 17:57:21 GMT

Wikipedia editors who have accounts can add their user page to categories which describe the user (such as "Wikipedians interested in law").
Most Wikipedia editors don't have accounts, and many accounts don't list their gender or don't add their user page to a gendered category.
However, of those who do:<li><a href="https://en.wikipedia.org/wiki/Category:Male_Wikipedians" target="_blank" rel="nofollow noopener">male</a>: 20,036 (62 trans men)</li><li><a href="https://en.wikipedia.org/wiki/Category:Female_Wikipedians" target="_blank" rel="nofollow noopener">female</a>: 4,872 (305 trans women)</li><li><a href="https://en.wikipedia.org/wiki/Category:Non-binary_Wikipedians" target="_blank" rel="nofollow noopener">non-binary</a>: 644</li><li><a href="https://en.wikipedia.org/wiki/Category:Agender_Wikipedians" target="_blank" rel="nofollow noopener">agender</a>: 109</li>
As I said, this only counts those who self-identify by:<li>adding a userbox indicating their gender</li><li>or manually add their page to a category</li>
Plus, there are some duplicates and erroneous entries, and it is hard to factor out them from the total.
Maybe men are more comfortable openly listing their gender? I would not be surprised if that is the case, given how women are treated online.
https://fed.brid.gy/r/https://bsky.app/profile/did:plc:cyyd366g3hrxp5rynixm2mm3/post/3ml27qrnzzc2n

2026-04-24 21:30:33 GMT

- reply

I personally think it was the right decision.
I know some people - including trans people - will disagree with me, but in my experience the people who tend to make those jokes turn out to be transphobes.
Or at the least, people who are at best allies only in the abstract, but are unwilling to accept the trans people in their lives.
Moreover, I used to make those type of jokes on Mastodon - before I knew I was trans. I wish someone had told me it was wrong, because maybe then I would have been forced to confront my transphobia.

2026-04-24 13:50:00 GMT

My local public school imposed a phone ban a few years ago (or rather required students to put their phones in locked pouches).
At the meeting where they announced this - which I attended despite not being a parent - someone raised this exact issue, and was basically ignored by leadership.
I think it might have been a student who raised this issue, even.
Moreover, I know some of the teachers there, and they are overworked and underpaid. The phone ban was just more work for them, and another thing to take away from actual teaching.
https://fosstodon.org/@brianb/116459833648717661
#note16w3…taup

2026-03-25 02:47:48 GMT

- reply

Interesting.
Has Apple (or other OS companies) done such lobbying in favor of age verification legislation? Or is it mainly social media companies?
That would certainly undermine my original argument if Apple was actively supporting this legislation rather than simply meeting their legal obligations.
Thanks

2026-03-25 02:10:33 GMT

- reply

The problem isn't Apple. [The UK government is requiring all companies to perform such age checks](https://www.lawfaremedia.org/article/to-read-this--please-upload-photo-id ), and many other places like the EU and California are following suit. Companies - and even open source projects - have to obey the law, even if they or their users disagree with it.
The law doesn't specifically require companies ask for credit cards - and that's a pretty poor way to handle age verification. However, other methods also are bad for their own reasons, requiring users to either submit to a racist and invasive face scan, or provide an ID.
Apple and Microsoft are horrible companies, but for other reasons. Moreover, as we are seeing with California, open source operating systems are *also* required to comply. Software developers should not and can not simply pick and choose what laws they obey.
Its unfair to blame them for the UK's poorly written mass surveillance and censorship legislation. The blame lies with the UK government, and with every other government mandating this.

2026-03-18 19:47:22 GMT

- reply

megalodon.jp can archive snapshots from archive.today, albeit at a really weird aspect ratio and zoomed out.
Sadly I'm not aware of any great alternatives, since AT was able to archive a lot of things the Wayback Machine and others couldn't.
I just figured I would let you and others know. The actual DDoS code is patched in most adblockers, and has been toned down, so there isn't an immediate threat beyond the general loss of trust in its reliability.
There's also a general question of how much longer AT will still be alive. Some powerful forces want it dead, and there are things going on which even the owner isn't aware of.

2026-03-18 19:42:50 GMT

- reply

FYI archive.ph isn't a trustworthy archive anymore: https://gyrovague.com/2026/02/01/archive-today-is-directing-a-ddos-attack-against-my-blog/
The owner has not only been DDoSing somebody's blog, but has actively altered archived websites: https://en.wikipedia.org/wiki/Wikipedia:Requests_for_comment/Archive.is_RFC_5#Evidence_of_altering_snapshots
The owner has admitted to one prior DDoS attack, and has also committed identity theft at least once.
Thanks

2026-03-09 20:20:12 GMT

According to a post on LinkedIn by developer Uros Gazvoda, uBlock DNS has reached over 37 thousand accounts and over 36 million blocked requests.
https://www.linkedin.com/feed/update/urn:li:activity:7436838518036832256/
The project is unaffiliated with uBlock Origin and Raymond Hill. The project has been controversial, with some uBlock Origin users mistakenly installing it under the belief it was owned by the same person.
Adding to this, uBlock Origin fan site ublockorigin[.]com has began promoting the project, without disclosing it is unaffiliated with uBo.
#uBlockOrigin #uBlockDNS

2026-01-29 19:15:41 GMT

- reply

they are on the same network. My tablet (a very old iPad) still gets the error; I restarted it and tested in two browsers.
Ray ID: 9c5b0cb44f3cf485
Probably is some weird caching; I won't waste your time any more.

2026-01-29 19:10:01 GMT

- reply

now I get a 200 when testing on my phone. I still get a gateway timeout on my tablet, which is odd.

2026-01-29 18:27:56 GMT

- reply

Edit: ray ID 9c5ac6747ce62a7e
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/979/793/590/288/428/original/e0ef7697dbd982c2.jpg

2026-01-29 18:23:20 GMT

- reply

fixed your Wikipedia: https://en.wikipedia.org/w/index.php?diff=1335522167
Most of the citations still go to the old domain though.
Also, I get a CloudFlare error on your new domain.

2026-01-29 18:19:30 GMT

- reply

No worries.
I can imagine.

2026-01-29 18:18:39 GMT

- reply

FYI, your Mastodon bio still links to the .com

2026-01-27 18:19:23 GMT

- reply

that makes a lot more sense.
Why use a bit.ly link, though? Its not like text messages have a character limit like a Tweet

2026-01-27 17:19:35 GMT

- reply

FYI the link to https://cdn.icmec.org/wp-content/uploads/2024/10/Digital-Age-Assurance-Act-Technical-White at the end of the article returns an access denied error, and doesn't seem to be archived on the Wayback Machine.
Is it this paper: https://static1.squarespace.com/static/6354fb8a954945102e2819e0/t/67650016ca459b0b0b955185/1734672499996/POSITION+PAPER+Device-Based+Age+Verification.pdf
From https://www.icmec.org/press/international-non-profits-call-for-mandatory-device-based-age-verification/

2026-01-18 02:27:48 GMT

Purported justification provided by the owner of archive.today for their DDoS attack has been that "gyrovague is doxxing us".
But, I'm curious, do you think the article by Jani Patokallio is "doxing"?
Either way it doesn't justify launching a DDoS, but I am curious what people think?
Also, to the lawyers and privacy experts out there, does the article by Jani Patokallio violate GDPR, as the owner of archive.today claims?
That of course is a separate question from the more subjective ethical one?
For the purposes of this legal analysis, assume the people referenced in the article are EU citizens.
#Privacy #Ethics #GDPR #Law

2026-01-16 17:01:03 GMT

In response to an email inquiry, the owner of archive.today stated:
> gyrovague is doxxing us, I just make it a bit more expensive to them
I have replied with further inquiries and am awaiting a response.

2026-01-16 03:39:07 GMT

I have confirmed archive.ph, which archive.today redirects to, has malicious code which attempts to spam gyrovague.com with requests. The code I independently verified matches the code in the Hacker News post.
Behind CloudFlare: https://tria.ge/260116-d3jafadj81/behavioral1
Do not use archive.today, archive.is, and archive.ph. By accessing these websites, you are donating your bandwidth to a botnet of unknown origin and purpose.
Original source:
https://social.coop/@eb/115902323900229756
An emergency update to the Malicious Website Blocklist has been made to counter this threat. An emergency update is currently in the works to fix the emergency update as it is in the wrong place (I want to link to this toot in the update, so waiting to commit until I post).
#note1tu6…cszn

2025-08-28 12:12:50 GMT

- reply

I have never watched his videos (because they look like clickbait garbage), but my nephews (right now 9 and 11 I think, not sure how old they were when they were into him) used to be into his content.
No idea why, or what they thought of him.

2025-01-23 02:00:31 GMT

A friend who works in OMB has called the new administration "a shitshow" (their words not mine).
According to them, they have had to take down hundreds of job offers government wide.
I have not independently verified this information.

2024-10-23 00:52:40 GMT

uBlock Origin 1.60.1b16 fixes an issue where connections on IPv6-only networks which used NAT64 would falsely be detected as connections to LAN (Local Area Network) IP addresses. This is the only change in that release.
Issue report: https://github.com/uBlockOrigin/uBlock-issues/issues/3426
Commit: https://github.com/gorhill/uBlock/commit/2621c908c31b70a983dacf5482600c116ee35102
On NAT64:
> the primary purpose of NAT64 is to allow an IPv6-only client to initiate communications to an IPv4-only server
https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/217208-understanding-nat64-and-its-configuratio.html
The issue here was that 64:ff9b::/96 was treated as LAN addresses. However, this is reserved for NAT64 in RFC6052:
> This document reserves a "Well-Known Prefix" for use in an algorithmic mapping. The value of this IPv6 prefix is: 64:ff9b::/96
Behind CloudFlare: https://www.rfc-editor.org/rfc/rfc6052
#uBlockOrigin #IPv6 #NAT64

2024-09-10 20:20:31 GMT

uBlock Origin can now block network requests based on their IP... with a few cavorts:<li>does not work for cached resources</li><li>only works in Firefox and Firefox-based browsers</li><li>gorhill did not add support for blocking document requests</li><li>it does not accept IPv6 addresses with square brackets (I think this just because the browser doesn't give the extension the IP in that format)</li>
Thanks to @npub1vwg…zx77 for sharing this.
https://github.com/uBlockOrigin/uBlock-issues/issues/2792
https://github.com/gorhill/uBlock/commit/c6dedd253ffbf649729a38998033c75993489859
#uBlockOrigin