Gerald Benischke

@beny23
0 Followers
93 Following
24 Posts
Maker, breaker and fixer of software. Adventures in #appsec and #agile: beny23.github.io he/him
Bloghttps://beny23.github.io/
Twitterhttps://twitter.com/giskard23
GitHubhttps://github.com/beny23
imagine deciding which engineers to keep around based on lines of code and choosing to keep the ones who wrote the MOST
@markhertling welcome to mastodon! I've really appreciated your coverage of the war in Ukraine

Hmmm. Is there any way to make a generic "Sign in with Mastodon" service?

I'm using Auth0 to manage user accounts on openbenches.org

I can make a Mastdon app, and connect it to Auth0 following this guide - https://charmed.blog/create-a-mastodon-login-extension-for-auth0/

But that *requires* the user to sign in to _this specific_ instance.

I want something to pop up, ask them for their @ name @ whatever.tld and then use my Client ID / Secret.

Is this possible - or am I thinking about it wrong?

Create a Mastodon Login Extension for Auth0

I describe in my previous post how to create a Node.js Express application that allows users to log in with a Mastodon instance. That post assumes you are…

This will be interesting to watch https://githubcopilotlitigation.com/
🍿
GitHub Copilot litigation · Joseph Saveri Law Firm & Matthew Butterick

GitHub Copilot litigation

I started on Infosec.exchange not too long ago, and it felt so quiet compared to the horror show I came from.
Since then, my timelines have exploded. Now I find myself in an amazing chaotic good environment that scratches my hacker itch to “break all the things” AND simultaneously manages to uphold my human requirement of others to “don’t be a dick”.

This place is awesome!

This looks a great way to find internal server names and possibly access tokens. If you send or receive I’ve links with sign-in info in the URL, it could be leaked if they pass through an automated tool like urlscan. #infosec https://positive.security/blog/urlscan-data-leaks

Twitter made it very clear today that I am not welcome on their platform, as they fired the entire Accessibility team.

Twitter has been a pretty great platform for low vision users, being well above most. However making something work for a screen reader or braille terminal is hard, and isn’t just a question of following a guide or copy/pasting an example. After all, that’s how you wind up with Password Managers that leak “hidden” data via Braille or Speech.

At some point you need to actually try those tools. And to be clear, they take a lot of time to learn!

If you don’t respect me as a person to say I am allowed to use the platform, I am fine learning something else instead. After all, I am used to struggling with barely usable shit simply to survive in a world that is rooting for me to fail.

One of the best things about Mastodon is the quality of the filtering.
I can easily ignore your Wordle posts, or #rugby, or specific phrases.
Extremely handy if you have a normally sensible friend who occasionally starts rambling on about Eurovision.

Go to /filters to get started.

Just joined this site, as a fallback to another currently-floundering-due-to-extremely-poor-leadership social media site. Will be posting items of interest about Ukraine, national security, healthcare, American Battle Monument events, and politics. Good to be here with you all!

I agree, this is as good as people say. An amusing and fast summary of why content moderation is so hard

https://www.techdirt.com/2022/11/02/hey-elon-let-me-help-you-speed-run-the-content-moderation-learning-curve/

Hey Elon: Let Me Help You Speed Run The Content Moderation Learning Curve

It’s kind of a rite of passage for any new social media network. They show up, insist that they’re the “platform for free speech” without quite understanding what that actua…

Techdirt