> We have computed the very first chosen-prefix collision for SHA-1. In a nutshell, this means a complete and practical break of the SHA-1 hash function, with dangerous practical implications if you are still using this hash function. To put it in another way: all attacks that are practical on MD5 are now also practical on SHA-1. Check our paper here for more details.

I'm sure some of you have noticed that many Fedi client applications leak certain metadata. Specifically, many of us turn off settings that share with the world what app we use. However, Tusky (and freetusky) and Roma put the app name in any image that is shared. This is no good, because for *some people* around here, which app you choose to use is a political statement and many of us would rather not get involved in that sort of a mess.

Unfortunately Fedilab (which I am using right now) while not having this problem, has become buggy feature bloat. The dev really needs to do a code freeze and fix bugs for a while. Theming is nice, but I'd rather the share button in image view work than be able to make my background purple.

The state of client applications in the fediverse has a little to be desired, and everyone gets it *almost* right but nobody hits the mark.

/end rant
I'll never make fun of those "needing to go frequently or urgently" commercials again

Checking out a messenger called Delta Chat, it essentially uses email to do messaging, so an IM UI paradigm around email. Great so far, might make it my main contact method since everyone he has email.

A new link aggregator being built in Go. Interesting, not community oriented like reddit, more along the lines of hackernews or UI still lacking, very very early testing version

As much as i like, I like Pleroma better than Mastodon. I have created an account on a Pleroma server, @mistermonster and intend to migrate there over the next few days. I will be following everyone i currently follow from that account, any of you that follow me, if you would like to follow that account as well that would be cool. I will keep this one as a backup but will not be using it that often in the future.

Should you tell your kids that santa is not real?

What browser do you use most of the time?

Merry Christmas internet friends!โ›„๐ŸŽƒ๐Ÿˆ๐Ÿ›’๐ŸŒฎ๐Ÿ–

So I just got a robocall in Chinese. This is the world we live in now.

Browsing the Hugo documentation when suddenly ๐Ÿคจ

Reminder: I'm trying to assemble a Working Group and a Community Group

This is the time to ask developers of forges (GitLab, Gitea, etc.) and ticket trackers (OpenProject, Taiga, etc.) to implement federation and to join the work on ForgeFed.

If you don't join, you don't get your needs taken into account, and we'll have a less useful lower quality spec.

Reminder, join if this stuff matters to you. And spread the word.


The free software mail client #K9Mail finally got a #Material redesign and tons of other changes & fixes with version 5.700. :yayblob:
Also available via #FDroid:
Be aware though that this is still a preview release. #Android

banning calling people without cognitive disabilities retards is classist and prejudiced against Bostonians

1x1 of what #webdev's should not do, but even Steam does it: UA sniffing.

They block #Firefox. (actually only allow #Chrome/#Chromium) For no reason.

If you try to reproduce it, it works, because Firefox shipped with a crazy workaround and spoofs the #UA. See

Anyway, that this steps have to be taken tells how bad a #browser #monopoly is. #Steam is only one incident.
Look at about:compat to see more workarounds.

More details:

Boxed wine is one thing, but drinking it with an attached plastic punch straw really makes me feel in control of my life.

Thank you for voting! Looks like we'll do monthly community review rounds. More details soon :)

We're working towards releasing the first spec draft, which will include a basic minimal feature set:

- Push Activity automatic publishing when commits are pushed to repos
- Federated opening of issues and commenting on them
- Federated patches and merge requests

More news soon!

Show more
Mastodon ๐Ÿ”

Fast, secure and up-to-date instance. provides knowledge and tools to protect your privacy against global mass surveillance.

Matrix Chat:
Support us on OpenCollective, your contributions are tax deductible!