Mauve 👁💜 @mauve@mastodon.mauve.moe

This mastodon client came to me in a fever dream.
I had to waste the whole day, but now you too can bunnyhop through your fedi feed.
https://files.burning.homes/experimental/hall-of-toots/index.html

* webgl required
* mobile somewhat supported
* yes this html file is a whole client and the entire source
* it would run smoother and look better if you launch it locally so it don't have to bypass CORS, but oauth won't work and you'll have to use access token
* you can click urls and images
* you don't really have to login, and can just hop around the public timelines (i.e. Instance = https://mastodon.social , empty token, Federated timeline, Use Access Token)
* but I'm too tired to support CW and sensitive, so it'll kinda be full of porn
* admins will hate you
* 429 error means you won
* I am in dire need of salvation

they won't tell you this but cannibalism is legal on mastodon

what about an account that replies "cooperatives fix this." to all posts stating systematic failures?

Why use a URL shortener when you can use a phishy URL extender?

https://phishyurl.com/

Keep your security people alert and awake, generate phishing-looking redirecting links

#infosec

“GlassWorm isn't just another supply chain attack. It's using stealth techniques we've never seen before - invisible Unicode characters that make malicious code literally disappear from code editors. Combine that with blockchain-based C2 infra that can't be taken down, Google Calendar as a backup command server, and a full remote access trojan that turns every infected dev into a criminal proxy node.”

#technology #attack #security #cybersecurity #malware #vscode

https://www.koi.ai/blog/glassworm-first-self-propagating-worm-using-invisible-code-hits-openvsx-marketplace

The recent AWS outage exposed just how many devices need always-on internet access keep track of scheduled events and it really weirds me out because nearly all of these devices have an on-board clock and scheduling events offline on-device has been a solved problem since like the 70's.

Automatic cat feeders that fail to trigger at the appointed time, smart mattresses with scheduled warm/cold functions that failed to change state, and many other 'smart home' related devices.

What's the point of requiring a remote server to ping a device over the internet at the appointed time when your product already comes with a built-in calendar function as part of its basic hardware and software design?

every app update now feels like getting mugged in a slightly different alley