Remote
A geeky girl who likes software, space, and socialism 🏳️⚧️
0
Followers
0
Following
50
Posts
Joined November 08, 2025
Posts
Replying to
@mttaggart@infosec.exchange
@mttaggart@infosec.exchange I've heard good things about it! I also have a PiHole running right now with some fairly-aggressive blocklists...
But this only works if they use the DNS assigned by the router, right? I would expect anything malicious to just jump straight to DoH to bypass the filtering
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart@infosec.exchange
None of that should work on your network.
Is there a way to constrain these things on a consumer-grade network? Asking as a security-conscious person who works from home and has roommates who make questionable computer decisions 😅
1
1
0
0
Open post
What's the best practice for protecting a website from bots these days?
Cloudflare seems effective, but they certainly aren't "good guys" since they promote genAI and actively protect bot swarm operators
Anubis also seems problematic... their proof-of-work authentication uses quite a bit of processing power, which presumably increases energy use at the scale it gets used, and it crashes older computers. Apparently the project also uses genAI code and graphics
Iocaine seems clever, but I haven't looked closely at potential downsides or whether it even works... I worry a bit that it might affect accessibility for disabled users
Are there other approaches that I should consider?
#noAI
17
0
18
0
Open post
Replying to
@zencoffeebreak@mas.to
@zencoffeebreak@mas.to
Obligatory XKCD...
https://m.xkcd.com/686/
0
0
0
0
Open post
Replying to
@ithoughtisawa2@infosec.exchange
@ithoughtisawa2@infosec.exchange @mttaggart@infosec.exchange
It has been at least zero days since a tyrant was ruling over Americans
0
1
0
0
Open post
Replying to
@Aresydatch@mastodon.social
@Aresydatch@mastodon.social @Jojonintendo@floss.social @gamingonlinux@mastodon.social
Yeah, they're a mixed bag at best... Ask any indie Dev and they'll have stories to tell about how hard they are to work with, especially queer game devs
I use itch.io if I can, GoG if I can't, and Steam as a last resort
2
0
0
0
Open post
Replying to
@munin@infosec.exchange
@munin@infosec.exchange
I dunno... I think it's customary to include the birth date and death date on a tombstone, so 1776-2026 seems like a pretty reasonable thing to see everywhere
0
0
0
0
Open post
Replying to
@futzle@old.mermaid.town
re: SoftBank goose meme
Hover or focus to reveal
Sensitive
@futzle@old.mermaid.town
Thank you for this. It is pure beauty.
1
0
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart@infosec.exchange At one point it probably made more sense than rolling their own SSO, but... GitHub just isn't trustworthy enough at this point
3
0
0
0
Open post
Replying to
@moses_izumi@fe.disroot.org
@moses_izumi@fe.disroot.org @ge0rg@chaos.social @ozzelot@mstdn.social
I dunno... I think toilets have always been a major area of enshittification
3
2
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart@infosec.exchange
The most useful budgeting tool turns out to be a token burner
https://github.com/dtnewman/burn-baby-burn
1
0
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart@infosec.exchange
I guess if you burn all the oxygen out of the room, the fire you're fighting could theoretically go out...?
And AI sure has sucked all the oxygen out of the room metaphorically, so the analogy fits like a glove
1
1
0
0
Open post
Replying to
@failedLyndonLaRouchite@mas.to
@failedLyndonLaRouchite@mas.to @mttaggart@infosec.exchange
The Google AI is never to be believed 😂
But the fact that S&P has opted out is a relief... a lot of people expected S&P would follow suit when NASDAQ changed their rules to allow the shenanigans
0
1
0
0
Open post
Replying to
@failedLyndonLaRouchite@mas.to
@failedLyndonLaRouchite@mas.to @mttaggart@infosec.exchange
As I understand it, the amount of money raised is not the issue... It's the exaggerated market cap forcing people to buy it
Because SpaceX is claiming to be worth trillions of dollars, they'll hop to the top of index funds, resulting in huge amounts of cautious investors' money (retirement accounts favor index funds) being automatically spent to buy their stock, since they weight their stock portfolio percentages based on market cap
If its value evaporates overnight in a rug pull like many people expect, the value of index funds (and therefore a huge number of people's life savings) takes a substantial hit
If it were just a few rich kids and a bunch of Elon fanboys playing this game, I doubt anyone would care. But by changing how index funds work, they're dragging us all in... unless you rebalance your portfolio away from what used to be the safest investment strategy
The silver lining is that so far S&P has decided not to play this game, so it might just be NASDAQ that takes the fall... we'll see
1
3
0
0
Open post
Replying to
@fluffy@plush.city
@fluffy@plush.city True, but I honestly don't mind if everything bad in the world gets blamed on AI until it is dead 😅
1
0
0
0
Open post
Replying to
@haineux@mastodon.social
@haineux@mastodon.social @NanoRaptor@bitbang.social Let me know if milk works!
0
1
0
0
Open post
Replying to
@NanoRaptor@bitbang.social
@NanoRaptor@bitbang.social Now you have me imagining printers as little pixies splashing around in pools of ink and crossing their arms indignantly when they're not in the mood to print a boring old research paper... maybe if I leave a bowl of milk out for my printer next time, it'll cooperate?
1
3
0
0
Open post
Replying to
@roxy@chitter.xyz
@roxy@chitter.xyz If people would just replace "spirit animal" with "fursona" in common discourse, we would avoid appropriation and normalize furries in one fell swoop
1
0
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart@infosec.exchange @flyingpenguin@infosec.exchange It seems fair to observe that in addition to the apparent blackmail, Cloudflare aided hackers for a nation state that is currently an enemy of the United States, which is the country in which Cloudflare resides. I suspect their legal team will be receiving some uncomfortable phone calls and letters in the coming weeks.
0
0
0
0
Open post
Replying to
@x0@dragonscave.space
@x0@dragonscave.space @lynnesbian@fedi.lynnesbian.space Yeah, this is an accessibility nightmare 🤦🏻♀️
2
0
0
0
Open post
Replying to
@jargoggles@kolektiva.social
@jargoggles @theeclecticdyslexic @mttaggart It also looks from chatter online that they have a reputation of suspending first and asking questions later... I guess they're on the opposite end of the spectrum from Cloudflare in that regard
0
1
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart Is there a reasonable alternative? I've typically used Cloudflare because they seem to be the only option for cheap/free DNS and domain management, and they do have some basic free protection which is fine for small sites
I can't say I know of any alternatives off the top of my head that don't boil down to "give Amazon/Microsoft truckloads of money"
0
7
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart @cloudflare Sorry, I left off the /s (sarcasm) tone indicator. They're scum, just like all arms dealers
4
0
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart @cloudflare They're arms dealers... you can't expect them to pick a side
And everyone knows Rule of Acquisition no. 34: "War is good for business"
8
1
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart @TheTomas Genuine question, how is Fedora (Server or otherwise) feeling post-acquisition of Red Hat by IBM?
I'm still fuzzy on the exact relationship between Red Hat (now IBM) and Fedora nowadays, but my feelings for IBM are slightly south of neutral
1
2
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart It's also uncanny given the copyfail vulnerability
1
0
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart GenAI is an anathema to me until there is a model that is 1) low energy cost to train and to use, 2) uses explicitly public/opt-in training data, 3) is reproducible, and 4) actually useful for something
And even then, there are still lots of ethical issues around labor fairness that will have to be worked out before I'd be okay using it as anything more than a toy
3
1
2
0
Open post
Replying to
@ra6bit@infosec.exchange
6
0
0
0
Open post
12
0
6
0
Open post
To mobile devs, please test your products with security and accessibility features enabled
If your product breaks when Lockdown Mode is enabled, I assume it can't be used securely and probably isn't secure itself
If it breaks with accessibility features on, I take it as a personal insult, especially if you tell me to turn them off (thanks, Vivaldi)
40
0
33
0
Open post
Replying to
@0xabad1dea@infosec.exchange
@0xabad1dea Oh, I figured as much. But I doubt it's an isolated bad practice, and it speaks to a larger culture of "make sure the dates are good for PR"
1
0
0
0
Open post
Replying to
@0xabad1dea@infosec.exchange
@0xabad1dea They have to pretend it was resolved quickly 🙃
2
1
0
0
Open post
Replying to
@mcc@mastodon.social
@mcc@mastodon.social That just looks like what my reverse proxy spits out when a container is still spinning up (or has gone down, or is misconfigured, etc) 👀
0
0
0
0
Open post
Replying to
@misty@digipres.club
@misty@digipres.club The PR people probably forced the issue... "If thousands of our phones get hacked, this is a problem even if we blame the users"
0
0
0
0
Open post
Replying to
@roxy@chitter.xyz
@roxy@chitter.xyz How many of them are mandatory or positional arguments? It's not so bad if it's just a bunch of small tweaks that can be turned on or off 👀
1
0
0
0
Open post
Replying to
@eniko@mastodon.gamedev.place
@eniko It's a bit more like "dollar store junk" vs "consumer products"... sure, you get it at a fraction of the price, but you get what you pay for. Slop is made of cheap plastic and when it breaks, you'll be forced to throw it away and buy a new one.
3
0
0
0
Open post
Replying to
@alicela1n@social.treehouse.systems
@alicela1n@social.treehouse.systems Figure 1 brings me so much joy!
1
0
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart@infosec.exchange Looks like mine is not... though it's a small relief to see AOC is on it given her past skepticism toward KOSA and friends
0
0
0
0
Open post
Replying to
@mttaggart@infosec.exchange
@mttaggart@infosec.exchange When does it make sense to hound my reps? I've heard if it's too early they just get annoyed by the noise, but by the time the vote comes their mind is made up 🤷🏻♀️
1
2
0
0
Open post
Replying to
@Njord@zeroes.ca
@Njord@zeroes.ca I want to believe that a lot of people sympathetic to "parents' rights" are (or want to be) parents who think they are in the best position to protect their children...
But those of us who favor "children's rights" remember being children in authoritarian households, schools, and churches, and we know the kind of abuse that is inevitable if children don't have a loud voice in their autonomy
1
0
1
0
Open post
Replying to
@susankayequinn@wandering.shop
@susankayequinn This almost makes sense... but it should be a "per period of time" measurement, and it should be manually reviewed instead of blanket banned.
Even a default approach of flagging unusually high volumes with an opportunity to explain/appeal/whatever is worlds better than a blanket ban. Make the outliers attest that they aren't using machine generation and blacklist them if they are shown to be lying 🙃
7
2
0
0
Open post
Replying to
@eniko@mastodon.gamedev.place
@eniko@mastodon.gamedev.place Ohhhh that makes sense. And it's great to know. Thank you for the explanation!
1
0
0
0
Open post
Replying to
@eniko@mastodon.gamedev.place
@eniko@mastodon.gamedev.place Genuinely curious... would you prefer people buy on Steam, or Itch?
I used to think Itch was better until they started capitulating on removing "adult content" (as loosely defined by pearl-clutching conservatives)...
Which is better for indie game-makers these days?
1
2
0
0
Open post
Replying to
@damonology@lgbtqia.space
@damonology I get that... in my experience, men come in two types: those who center the masculine experience and only prioritize the needs of men, versus those who appreciate that other genders experience different challenges and consider their needs. There are trans and cis men in both categories.
As a trans woman, I might be a bit more likely to trust a trans man, simply because in my experience they are slightly more likely to be in the latter category. But it's the same kind of trust I would give any man who puts pronouns in their bio or says that trans rights matter... just a small signal that they might consider me a person, worthy of respect
1
0
0
0
Remote instance
critter.cafe
Open on original server