@mwk it was an excellent post and thread, a genuine "this could only happen on fedi" moment

@neil one account for everything is exactly how activitypub is *supposed* to work.


Then everyone ignored the client to server API and did their own things

@foone I don't know of any RWB documentation

But RWX: https://wiki.activeworlds.com/index.php?title=Renderware

@jenniferplusplus @trwnh @helge well even if this one did getting a m.s account should be scraper action #1

@easrng generally we try not to have relocations in code these days

@jenniferplusplus @trwnh @helge if you follow a mastodon.social user it'll appear in m.s' /api/v1/instances/ where the scrapers will find it

@easrng oh hey it's basically the Objective-C non fragile ABI

@trwnh @helge lots of infant mortality, but it quickly gets into the tables of all instances ever because many people's first action is follow gargron

@atax1a @cr1901 The AArch64 [SU]?BFM instructions are similarly swiss army knife and very pleasing for their flexibility (and how many friendly mnemonics are mapped to them)

@puppygirlhornypost2 @SymTrkl @becomethewaifu @julia @natty (and WireGuard could have been a simple handshake protocol which then shoves key material into the kernel over the Linux xfrm interface and the result would have been equally secure, more functional, much faster, and already offloaded on a surprising amout of networking hardware)

@puppygirlhornypost2 @natty @SymTrkl @becomethewaifu @julia there exist other, significantly higher performance options with less stupid foodguns like “we ignore all ICMP packets received from the other end” VPN options

Like IPsec, which has its own problems but not these stupid assinine ones.

@becomethewaifu @puppygirlhornypost2 @natty @SymTrkl @julia Wireguard: It’s just not that good, actually.

@filippo The PRF extension saddens me so much because its so close yet so far. If it handed over the PRF secret at enrollment time it would be perfect for so many things. Alas

But it does work for local entirely local encryption tasks like this.

@unlobito even then its very neat that if things let me do so I could just mint daily credentials to limit risk.

I never really paid attention to how AWS4 authorization signatures worked before, but realising they’re basically a limited subset of Macaroons is very neat.

Knowing how the construction works I’m also now very disappointed that basically no software I use lets me pass in “today’s secret key for the S3 service in us-east1” instead of the valid for all time access key secret.

Anyway prior to the existence of Credit Reference Agencies the primary way eligibility for debt (e.g. mortgages) was decided was “your bank manager’s opinion of you (supported by various facts he has on you)” and humans are a lot more inherently racist, sexist and classist than modern credit scoring algorithms (where people spend an awful a lot of time worrying “is this factor I have encoded into my algorithm accidentally race or gender?”)

Love too see viral posts go past on my timeline that don’t even pass trivial scrutiny:

From the opening paragraphs of the Equifax Wikipedia page:

Equifax was founded as the Retail Credit Company by Cator and Guy Woolford in Atlanta, Georgia, as Retail Credit Company in 1899. By 1920, the company had offices throughout the United States and Canada. By the 1960s, Retail Credit Company was one of the nation’s largest credit bureaus, holding files on millions of American and Canadian citizens

(Maybe the “credit score” is newer? But the credit score is an abstraction to give you an insight on what your credit file says, nothing more)

Overdraft fees meanwhile are basically as old as the cheque.

RE: https://mastodon.social/@MEActNOW/113789371626213991

@gsuberland eh I much prefer the “run an ingress and give things hostnames” approach to assigning each service an IP even if it has an additional moving part

But also what you want is something they could easily offer on k8s with some careful CNI config.

@gsuberland Given they’re running k8s I’d expect them to just run an ingress e.g. Traefik and create ingress rules so you can have nice hostnames >_>

@gsuberland heck k8s is an incredibly flexible flexible system with many options but one thing you can rely on is that every Pod will have a unique IPv4 or IPv6 address (potentially both)