Open post Julian Lam @devnull@crag.social · 39mo ago Replying to @toychicken@mastodon.social <p>Just think, now every single site that has an <a href="https://mastodon.social/tags/embedded" class="mention hashtag" rel="tag">#<span>embedded</span></a> <a href="https://mastodon.social/tags/tweet" class="mention hashtag" rel="tag">#<span>tweet</span></a> view in an article is no longer displaying that tweet.</p><p>* At best, <a href="https://mastodon.social/tags/Elon" class="mention hashtag" rel="tag">#<span>Elon</span></a> can show whatever he wants on it's place, tweet-by-tweet from subtle change to full-on counter-factual or malvertising.<br />* At worst, it's a vector for Elon <a href="https://mastodon.social/tags/musk" class="mention hashtag" rel="tag">#<span>musk</span></a> to run whatever *code* he wants on your site.</p><p>Used an <iframe>? You're in the best case camp. <br />Used a <a href="https://mastodon.social/tags/Twitter" class="mention hashtag" rel="tag">#<span>Twitter</span></a>-hosted embed <script> ? Good luck.</p> @toychicken sounds like a wonderful use-case to demonstrate exactly why a Content Security Policy is important! https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy developer.mozilla.org
Open post Julian Lam @devnull@crag.social · 40mo ago Replying to @nodebb@fosstodon.org @jdp23@indieweb.social @narF@mstdn.ca @devnull@crag.social indeed! We've worked with big AAA gaming companies to really build out our moderation tooling. Both #Bethesda and #Ubisoft collaborated with us to improve our flagging and user mod tools, and the challenge with #ActivityPub is figuring out how to federate these tools. A worthy cause. 💯 @nodebb@fosstodon.org @jdp23@indieweb.social @narF@mstdn.ca Note that @nodebb@fosstodon.org said collaborated, past tense. We lost both those companies to what I feel is an inferior communication product, but this is not the forum (ha ha get it) to discuss that particular grievance 😉
Open post Julian Lam @devnull@crag.social · 41mo ago Replying to @kevinmirsky@infosec.exchange <p>What are people using for <a href="https://infosec.exchange/tags/selfhosted" class="mention hashtag" rel="tag">#<span>selfhosted</span></a> <a href="https://infosec.exchange/tags/blogging" class="mention hashtag" rel="tag">#<span>blogging</span></a> these days? Looking to set up one for myself soon, love to hear anyone's experiences. :)</p> @kevinmirsky I ended up writing a very minimalist frontend using #Github #gists as my backend data store. I write in #markdown, post, and forget about it I until I want to post again. I wrote it all up here 👇 https://devnull.land/github-gist-blog devnull.land
Open post Julian Lam @devnull@crag.social · 40mo ago Replying to @thisismissem@hachyderm.io @nodebb@fosstodon.org @devnull@crag.social let me know if you need anything when it comes to understanding Flag activities & how reports/Moderation works Thanks @thisismissem@hachyderm.io — if there's one thing I learned in my month and a half here (👶), it that robust moderation tooling is number one on the feature list after basic #ActivityPub interop support.
Open post Julian Lam @devnull@crag.social · 40mo ago Replying to @tchambers@indieweb.social @nodebb@fosstodon.org @devnull@crag.social Keep me in the loop, always looking for new cool fedivere enabled apps. And I totally could imagine the need for more of a full featured forum that does Federation in a first class way. RIght now my main view on that is Discourse with an activitypub plugin. @tchambers@indieweb.social @nodebb@fosstodon.org I've been vaguely following along, mostly because @smallcircles@social.coop lets me know when something happens on that front. I honestly wish them the best. If #NodeBB, Discourse, and Flarum all federate, that's only a win for the #fediverse