Actually, you just significantly reduced my security, Gandi. You should have let the users manage this transition, or at least warn them ahead of time what was going to happen if they didn't.

Replacing unphishable auth (old school U2F is still quite functional!) with phishable auth (email) without user consent is not acceptable.

#Gandi #SecurityKeys #U2F

#Gandi just "upgraded" me from U2F to E-Mail MFA.

U2F binding was removed. E-Mail MFA was put in place instead.

No advanced warning, no migration period.

Would have gladly upgraded that to #Webauthn had they asked.

Strong signal that the "no bullshit" policy is no more.

What happens when your husband gets kidnapped by ICE and you worry about it on Bluesky? Your account gets suspended, the Head of Trust and Safety trolls you on a secondary account you create to try and figure out what happened, then bans that account!

Fucking HELL what is WRONG with that site?!?

#Bluesky

So something in our CI pipeline broke recently. One my team has spent all day working out why we could no longer update the README file for a docker container we push to Docker Hub.

Turns out Docker use CloudFlare WAF and they have recently updated their rules to drop anything that contains the string /etc/hosts, which is certainly an interesting choice.

#WAF #CloudFlare #Enshitification

The Danish government is using the upcoming Christmas break to slip through a public consultation for a draft law that would make it an OFFENCE to use a #VPN to access content that would otherwise not be available in Denmark, or to circumvent the blocking of "illegal" websites. https://hoeringsportalen.dk/Hearing/Details/70858

This is done under the guise of ensuring a technologically neutral implementation of Directive 98/84 on pay-TV decoders (hint: the IP address is NOT a conditional access device).

#Copyright

I would like to take this opportunity to promote an excellent Free Software project that I discovered about 20 minutes ago:

https://codeberg.org/c4ffe14e/phice

This software, called Phice, enables you to read FaceBook pages without logging into Facebook. No more ads or annoying login prompts.

I installed it easily, on my build slave (where I also host an Invidious instance); it's also where I test Libreboot lbmk builds, hence "build slave".

I'm now running a private Phice instance.

GNU AGPLv3 licensed.