Mister Monster @mister_monster@social.privacytools.io

https://sha-mbles.github.io/

> We have computed the very first chosen-prefix collision for SHA-1. In a nutshell, this means a complete and practical break of the SHA-1 hash function, with dangerous practical implications if you are still using this hash function. To put it in another way: all attacks that are practical on MD5 are now also practical on SHA-1. Check our paper here for more details.

I'm sure some of you have noticed that many Fedi client applications leak certain metadata. Specifically, many of us turn off settings that share with the world what app we use. However, Tusky (and freetusky) and Roma put the app name in any image that is shared. This is no good, because for *some people* around here, which app you choose to use is a political statement and many of us would rather not get involved in that sort of a mess.

Unfortunately Fedilab (which I am using right now) while not having this problem, has become buggy feature bloat. The dev really needs to do a code freeze and fix bugs for a while. Theming is nice, but I'd rather the share button in image view work than be able to make my background purple.

The state of client applications in the fediverse has a little to be desired, and everyone gets it *almost* right but nobody hits the mark.

/end rant

I'll never make fun of those "needing to go frequently or urgently" commercials again

A new link aggregator being built in Go. Interesting, not community oriented like reddit, more along the lines of hackernews or prismo.xyz. UI still lacking, very very early testing version

https://github.com/mariusor/littr.go

https://littr.me

Twitter flaw let a researcher match 17 million phone numbers with users https://www.engadget.com/2019/12/24/twitter-phone-number-matching-flaw/

The "No One Cares" Show, Ep. 39: The Coomer and the Fairweather Libertarian https://peertube.anon-kenkai.com/videos/watch/bf340eb4-4fd2-4a99-8a46-8f383a71ea4b

Browsing the Hugo documentation when suddenly 🤨

Reminder: I'm trying to assemble a Working Group https://talk.feneas.org/t/working-group-instructions/196/3 and a Community Group https://talk.feneas.org/t/monthly-community-review-round-instructions/192/4

This is the time to ask developers of forges (GitLab, Gitea, etc.) and ticket trackers (OpenProject, Taiga, etc.) to implement federation and to join the work on ForgeFed.

If you don't join, you don't get your needs taken into account, and we'll have a less useful lower quality spec.

Reminder, join if this stuff matters to you. And spread the word.

--fr33

The free software mail client #K9Mail finally got a #Material redesign and tons of other changes & fixes with version 5.700.
https://github.com/k9mail/k-9/releases
Also available via #FDroid: https://f-droid.org/packages/com.fsck.k9/
Be aware though that this is still a preview release. #Android

banning calling people without cognitive disabilities retards is classist and prejudiced against Bostonians

1x1 of what #webdev's should not do, but even Steam does it: UA sniffing.

They block #Firefox. (actually only allow #Chrome/#Chromium) For no reason.

If you try to reproduce it, it works, because Firefox shipped with a crazy workaround and spoofs the #UA. See https://github.com/webcompat/web-bugs/issues/34171.

Anyway, that this steps have to be taken tells how bad a #browser #monopoly is. #Steam is only one incident.
Look at about:compat to see more workarounds.

More details: https://social.wiuwiu.de/@rugk/102412860162095905

Boxed wine is one thing, but drinking it with an attached plastic punch straw really makes me feel in control of my life.

Thank you for voting! Looks like we'll do monthly community review rounds. More details soon :)

We're working towards releasing the first spec draft, which will include a basic minimal feature set:

- Push Activity automatic publishing when commits are pushed to repos
- Federated opening of issues and commenting on them
- Federated patches and merge requests

More news soon!

New ducklings
#chile #photo
Tusky_1575412711969_X8Z2L338LR.…