Fedify 2.1.0 is out!

The highlight of this release is onUnverifiedActivity(), a long-requested hook that lets you intercept inbound activities whose signatures couldn't be verified, instead of silently returning 401 and letting remote servers retry forever. Great for handling Delete activities from permanently gone actors.

Also new: full RFC 9421 Accept-Signature negotiation on both outbound and inbound paths, GoToSocial interoperability fixes, @fedify/mysql for MySQL/MariaDB backends, @fedify/astro for Astro integration, and fedify lookup --recurse for following reply chains.

Release notes: https://github.com/fedify-dev/fedify/discussions/642

I was inspired by @FineFindus and @hbons to post a bit more on what I'm working on, so here goes!!

I have been working on [Peachy](https://gitlab.gnome.org/vixalien/peachy), a small framework to write GNOME/Linux applications with GTK and React (yes!).

For dogfooding, I've been prototyping a little Hacker News client, since they have a nice and free API with a small scope.

Through the way, I've been adding features to Peachy such as supporting List/Grid views, polyfills etc

#gjs #gnome #react #linux #gtk #hn

Perhaps it is because I have used Linux for quite a long time now, and it did not always work so well, but I still smile when I plug my laptop (Debian, Gnome, Wayland) into a Thunderbolt dock via USB-C shaped connector, and its display appears on multiple 4K monitors within a couple of seconds.

I unplug it, and it comes back to the laptop screen.

Screen rotation on my laptop works flawlessly.

Thank you - genuinely - to everyone who has worked on making this happen so seamlessly.

CSSkit, a high-performance CSS toolchain written in Rust. @keithamus’s project combines CSS parsing, minification, linting, formatting, transpilation, bundling, and analysis into one tool with zero configuration. It also includes LSP integration for IDE support. The project is inspired by oxc and is currently in alpha. #css #tools

https://csskit.rs

You're paying AI companies a monthly subscription fee to be fingerprinted like a parolee.

I got bored and ran uBlock across Claude, ChatGPT, and Gemini simultaneously.

Claude:

• Six parallel telemetry pipelines.
• A tracking GIF with 40 browser fingerprint data points baked into the URL, routed through a CDN proxy alias specifically to make it harder to block.
• Intercom running a persistent WebSocket whether you use it or not.
• Honeycomb distributed tracing on a chat UI because apparently your conversation needs the same observability stack as a payments microservice.

ChatGPT:

• proxies telemetry through their own backend to hide the Datadog destination URL from blockers.
• uBlock had to deploy scriptlet injection — actual JS injected into the page to intercept fetch() at the API level — because a network rule wasn't enough.
• Also ships your usage data to Google Analytics. OpenAI. To Google. You cannot make this up.
• Also runs a proof-of-work challenge before you're allowed to type anything.

Gemini:

• play.google.com/log getting hammered with your full session behavior, authenticated with three SAPISIDHASH token variants, piped directly into the Google identity supergraph that correlates everything you've ever done across every Google product since 2004.
• Also creates a Web App Activity record in your Google account timeline. Also has "ads" in one of the telemetry endpoint subdomains.

When uBlock blocks Gemini's requests, the JS exceptions bubble up and Gemini dutifully tries to POST the error details back to Google. uBlock blocks that too. The error messages contain the internal codenames for every upsell popup that failed to load.

KETCHUP_DISCOVERY_CARD.
MUSTARD_DISCOVERY_CARD.
MAYO_DISCOVERY_CARD.

Google named their subscription upsell popups after condiments and I found out because their error handler snitched on them.

All three of these products cost money.
One of them is also running ad infrastructure.

Touch grass. Install @ublockorigin

#infosec #privacy #selfhosted #foss #surveillance

Chad was the wankerbutternoodle Mstdn.ca owner who had called the cops on me for some past political posts. It was using cop violence on POC. The cops showed up & left fast, because it was all BS. It traumatized my Mom & enraged me. The cowardly liar then denied it when I posted about it all. A bunch of white folks supported him & didn't believe me. I knew #karma would catch up with that liar, sooner or later. Now, it has.

Cops will be coming after him, for a real crime.
I told you all that Chad was a dirty, lying weasel. Maybe, believe me instead of the white guy, next time 🤡

https://toot.cat/@catzilla/116267551374750231

#Criminal #Fraud #Canadian #Alberta #Liar #ToldYouSo #ConMan

Quick vibe check on @elk usage.

👉 Have you been using #Elk web app (https://elk.zone)?

Please #boost for science :) We have been discussing the future of Elk and your input here matters a lot. 🙏

Feel free to elaborate on the comments as well!

#askmastodon #askfedi #askmasto #fediverse #mastodon #mastodev