@makeworld.space Same but I only see the ones that also followed the AP bridge first 🤪

You ever see those renovation videos where they take the gaudy laminate off the floor only to find three layers of mouldy hardwood they now need to deal with? Race conditions in async code can be like that sometimes. :P

One of these days I'll make the graph manipulation tool of my dreams so I can focus more on the connections and transforms rather than the text format.

Something I hadn't quite appreciated about gemtext, the text format used by the Gemini smolweb protocol, is that there's no need for a validator. Every text file is also valid gemtext (insert mild handwaving here), just maybe not the gemtext you wanted.

ME: Fuck it, we bawl

HER: …do you me “we ball”?

ME: *tears already forming in my eyes* No

Useful writeup on the NPM worm that's been spreading today. tl;dr 2FA should help reduce your risks if you're careful, it might steal your AWS/Azure/GCP secrets though. Windows users are fine. 🤪

krebsonsecurity.com/2025/09/se

I actually like cleaning up code and fixing refactors. It's like one of those "power washing simulator" but for code. Methodically picking away at the errors until the linter is happy and the tests pass.

Look, Jeff Atwood, it is difficult to take you seriously when you write authoritatively on a subject you clearly don’t understand.

GDPR doesn’t mandate cookie notices.

Cookie notices are *malicious compliance* by the surveillance-driven adtech industry.

If you’re not tracking people, you do not need a cookie notice, period.

If you’re only using first-party cookies for functional reasons, you do not need a cookie notice, period.

If you’re using third-party cookies to track people – i.e., if you’re sharing their data with others – then *you must have their consent to do so*. Because, otherwise, you are violating their privacy. Even then, the law doesn’t mandate a cookie notice.

How would you conform to EU law without a cookie notice if your aim wasn’t malicious compliance?

You would not track people by default and you would make it so they have to go your site’s settings to turn on third-party tracking if, for some inexplicable reason, they wanted that “feature”.

Boom!

No cookie notice necessary.

What’s that?

But that would destroy your business because your business is founded on the fundamental mechanic of violating people’s privacy?

Good.

Your business doesn’t deserve to exist.

Because the real bullshit here isn’t EU legislation that protects the human right to privacy, it’s the toxic Silicon Valley/Big Tech business model of farming people for data that violates everyone’s privacy and opens the door to technofascism.

infosec.exchange/@codinghorror

@travisfw @jeremy_list @fleeky "scaling up can mean blowing your budget if you don't configure limits" is the thing that goes away when you stop using centralized DBs and infra and move data / logic to peers. If data gets popular it has more peers resharing it to the network instead of costing individuals more. As a dev you pay nothing (but can offer backup services), as a user the devs can't take your info/community/utility from you so long as the p2p network lives.

@travisfw @jeremy_list @fleeky Another direction is using p2p to bridge to self hosting where you host servers (or worker runners) on community or personal infra that you trust, and the p2p connections (like veilid) skip the need for setting up SSL/public IPs to talk to compute from client apps.

In the case of AWS who is paying to keep the infra running? If it's not the clients themselves then you end up with crypoto coin economics like holochain which is less appealing than stuff being free

@travisfw @jeremy_list @fleeky I think that's the direction the IPVM foks were going. github.com/ipvm-wg/homestar/

In P2P apps what you can do is move that "server code" onto the client directly. Then you focus on local first DBs and sync engines for getting clients on the same page.

The big question with "serverless functions" is how you can manage authority and trust. Apps that require secrets to access a DB need trusted servers. At that point you either need creds per client or skip central DBs

I miss finding random B movies at the local video rental place.

@travisfw @fleeky could you elaborate on what "serverless" means to you? Just stuff like cloudflare workers?

Eyyy, fixed the weird issue I had where dark mode wasn't working for me in @agregore Next I'm gonna add a keyboard shortcut for "go up one directory level" since I use that a lot in file browsers

Celebrity worship makes me sick to witness. Placing people above others soley because they get more attention is immoral.

Mastodon terminology question 

@tty That's aligned with my understanding too.

Show older
Mauvestodon

Escape ship from centralized social media run by Mauve.