Hazelnoot

@kr3st3n@infosec.exchange @theodric@social.linux.pizza @phloggen@expressional.social a related one is to generate a bunch of very large benign archives to flood the scan queue before it picks up your payload, giving it time to execute before the system flags it.

btw I'm still very available for hire! Full-Stack Software Engineer experienced with System Design / Architecture, Software Development, Computer Security, and other DevOps processes (Testing, Deployment, Operations, Monitoring). Experienced with Cloud, On-premises (bare-metal), and Embedded system environments. Excellent team player described as "genuine", "charismatic", and "a joy to work with" by current and former leadership. Greatly experienced in Software Development positions, but looking to pivot to a more security-oriented role within the development field, ideally using my experience in Computer Security and Secure Software Development to help build safe and reliable backend software. My ideal job would be a long-term position on a team with a healthy work environment and friendly (but professional) work relationships. --- Decade of experience in Software Development and Computer Security, plus non-professional experience in Linux System Administration, Embedded Software Development, and Security Auditing. I've got a Bachelor's Degree in Computer Science (Cyber Security concentration) and have training in GDPR, PCI, HIPAA, FERPA, and other compliance requirements. I work well on a team and have experience with many common work management platforms (Azure DevOps, Jira, RTC), office suites (Microsoft Office, Google Cloud / Workspace, Office 365, Open/Libre Office), and other collaboration tools (Skype, Zoom, WebEx, Google Meet, Microsoft Teams). My experience is primarily in C# (DotNet Framework, Core, and Modern), Web Platform Technologies (TypeScript, JavaScript, HTML, CSS, SCSS, SASS), and Relational (SQL) Databases (PostreSQL, Oracle, SQLServer, SQLite), but I'm a quick learner and could easily adopt any technology that's similar to something I know. I have extensive experience with Cloud Development (Microsoft Azure), On-Premises Deployment, and Hosted Servers (VPS, managed, abd bare-metal). I also have experience in customer support, and while I'm not willing to accept any IT Helpdesk or Support role, I do believe that experience helps me in the software development field as well. I've been commended by managers for my ability to explain technical information in non-technical terms, work with inexperienced or non-technical staff in a supportive way (I never talk down or judge anyone for lacking knowledge), and participate constructively in cross-functional discussions beyond my area of expertise. I enjoy a good challenge, as long as I have the support and tools I need. I pride myself in delivering robust, well-tested, and reliable solutions that can last long-term with minimal maintenance requirements or tech debt. --- While I'm generally flexible in most things, I do require a position with strong healthcare benefits, remote work options, and an inclusive work environment. I also strongly desire time flexibility to support my role as a caretaker for my physically-disabled wife. I prefer a role that does not use AI-based coding tools, but I'm willing to use them if required. --- If this sounds like someone you'd like at your organization, then please send a DM (Private Message)! Resume and professional contact details available upon request. Otherwise, please boost for visibility! #GetFediHired #FediHired #FediHire

@hongminhee@hollo.social boosting this for the excellent points, even though I'm one of the people not using JSON-LD and frequently producing malformed documents. (And honestly, I don't think I'll change that soon. Sharkey only uses JSON-LD on one single code path, and even that's been enough to introduce critical bugs. I'm planning to remove the JSON-LD lib entirely from Campfire fork.) ((And that's not even getting into the security problems with every JSON-LD lib I've ever audited...))

@theresnotime@fox.nexus there's no numbers on the front of my debit card ​:neofox_cry_loud:​​:neofox_cry_loud:​​:neofox_cry_loud:​

@coreforge@furry.engineer what the fuck ​:neofox_laugh_tears:​

@fuckfetish@fuckaas.space "born again woman" is amazing

@zaire@fedi.absturztau.be @eskuero@mstdn.io @GrapheneOS@grapheneos.social it's literally that "OpenTorment" meme ​:neofox_melt_2:​

@soatok@furry.engineer I didn't expect to see this one again so soon after it totally didn't leak early

@JadedBlueEyes@tech.lgbt me lol ​:neofox_laugh_sweat:​

@soatok@furry.engineer ​:noted:​

@itzpingcat@sakurajima.moe that could work in theory, but I don't think anyone's tried it before. One way to partially mitigate the risk is to silence the bridges (instead of suspending them) which automatically mutes the bridged users until you follow them locally.

@nathan@ublog.hurel.me no, I use a trigram index for that

@itzpingcat@sakurajima.moe you can suspend a particular bridged user, but nostr is specifically designed to resist moderation and prevent blocking. It allows users to just generate new keypairs whenever they want, so the suspension won't be very effective.

If possible, buy injection supplies from a medical supplier instead of a pharmacy. They're cheaper, come in bulk, allow you to pick the exact needle size you want, and are far less likely to be out of stock when you need a refill. Some locations have restrictions on this, but you can just get an out-of-state friend to place an order for you.

@faithisleaping@anarres.family close - it turned out to be one Firefox window!

I miss being excited for software updates.

here's the query used. fair warning - it's ugly and takes minutes to complete! SELECT unnest(array[ 'total', 'isSilencedUser', 'isSilencedHost', 'isSuspendedUser', 'isSuspendedHost', 'isPublic', 'isHome', 'isFollowers', 'isSpecified', 'isPoll', 'isMedia', 'isReply', 'isReplyToSelf', 'isBoost', 'isBoostOfSelf', 'isQuote', 'isQuoteOfSelf', 'isChannel', 'isRemote', 'isLocal', 'isLocalOnly' ]) AS "Metric", unnest(array[ to_char("total", '999,999,990'), to_char("isSilencedUser", '999,999,990'), to_char("isSilencedHost", '999,999,990'), to_char("isSuspendedUser", '999,999,990'), to_char("isSuspendedHost", '999,999,990'), to_char("isPublic", '999,999,990'), to_char("isHome", '999,999,990'), to_char("isFollowers", '999,999,990'), to_char("isSpecified", '999,999,990'), to_char("isPoll", '999,999,990'), to_char("isMedia", '999,999,990'), to_char("isReply", '999,999,990'), to_char("isReplyToSelf", '999,999,990'), to_char("isBoost", '999,999,990'), to_char("isBoostOfSelf", '999,999,990'), to_char("isQuote", '999,999,990'), to_char("isQuoteOfSelf", '999,999,990'), to_char("isChannel", '999,999,990'), to_char("isRemote", '999,999,990'), to_char("isLocal", '999,999,990'), to_char("isLocalOnly", '999,999,990') ]) AS "Value", unnest(array[ to_char((("total"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isSilencedUser"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isSilencedHost"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isSuspendedUser"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isSuspendedHost"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isPublic"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isHome"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isFollowers"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isSpecified"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isPoll"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isMedia"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isReply"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isReplyToSelf"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isBoost"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isBoostOfSelf"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isQuote"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isQuoteOfSelf"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isChannel"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isRemote"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isLocal"::float8 / "total"::float8) * 100::float8), '990.00%'), to_char((("isLocalOnly"::float8 / "total"::float8) * 100::float8), '990.00%') ]) AS "Percent", unnest(array[ 'All notes', 'Notes by a silenced user', 'Notes from a silenced instance', 'Notes by a suspended user', 'Notes from a blocked instance', 'Public notes', 'Home-only / unlisted notes', 'Followers-only notes', 'Specified / DM notes', 'Polls', 'Notes w/ media', 'Replies', 'Self-replies', 'Boosts', 'Self-boosts', 'Quotes', 'Self-quotes', 'Notes in a channel', 'Remote notes', 'Local notes', 'Local-only (defederated) notes' ]) AS "Metric" FROM ( SELECT COUNT("id") as total, COUNT("id") FILTER ( WHERE "isSilencedUser" = true ) as "isSilencedUser", COUNT("id") FILTER ( WHERE "isSilencedHost" = true ) as "isSilencedHost", COUNT("id") FILTER ( WHERE "isSuspendedUser" = true ) as "isSuspendedUser", COUNT("id") FILTER ( WHERE "isSuspendedHost" = true ) as "isSuspendedHost", COUNT("id") FILTER ( WHERE "isPublic" = true ) as "isPublic", COUNT("id") FILTER ( WHERE "isHome" = true ) as "isHome", COUNT("id") FILTER ( WHERE "isFollowers" = true ) as "isFollowers", COUNT("id") FILTER ( WHERE "isSpecified" = true ) as "isSpecified", COUNT("id") FILTER ( WHERE "isPoll" = true ) as "isPoll", COUNT("id") FILTER ( WHERE "isMedia" = true ) as "isMedia", COUNT("id") FILTER ( WHERE "isReply" = true ) as "isReply", COUNT("id") FILTER ( WHERE "isReplyToSelf" = true ) as "isReplyToSelf", COUNT("id") FILTER ( WHERE "isBoost" = true ) as "isBoost", COUNT("id") FILTER ( WHERE "isBoostOfSelf" = true ) as "isBoostOfSelf", COUNT("id") FILTER ( WHERE "isQuote" = true ) as "isQuote", COUNT("id") FILTER ( WHERE "isQuoteOfSelf" = true ) as "isQuoteOfSelf", COUNT("id") FILTER ( WHERE "isChannel" = true ) as "isChannel", COUNT("id") FILTER ( WHERE "isLocal" = false ) as "isRemote", COUNT("id") FILTER ( WHERE "isLocal" = true ) as "isLocal", COUNT("id") FILTER ( WHERE "isLocalOnly" = true ) as "isLocalOnly" FROM ( SELECT "note"."id", "user"."isSilenced" as "isSilencedUser", COALESCE("instance"."isSilenced", false) as "isSilencedHost", "user"."isSuspended" as "isSuspendedUser", COALESCE("instance"."isBlocked", false) as "isSuspendedHost", "visibility" = 'public' as "isPublic", "visibility" = 'home' as "isHome", "visibility" = 'followers' as "isFollowers", "visibility" = 'specified' as "isSpecified", "hasPoll" as "isPoll", "fileIds" != '{}' as "isMedia", "replyId" IS NOT NULL as "isReply", "replyUserId" = "userId" as "isReplyToSelf", "renoteId" IS NOT NULL AND ( "text" IS NULL AND "cw" IS NULL AND "replyId" IS NULL AND "hasPoll" = false AND "fileIds" = '{}' ) as "isBoost", "renoteUserId" = "userId" AND ( "text" IS NULL AND "cw" IS NULL AND "replyId" IS NULL AND "hasPoll" = false AND "fileIds" = '{}' ) as "isBoostOfSelf", "renoteId" IS NOT NULL AND NOT ( "text" IS NULL AND "cw" IS NULL AND "replyId" IS NULL AND "hasPoll" = false AND "fileIds" = '{}' ) as "isQuote", "renoteUserId" = "userId" AND NOT ( "text" IS NULL AND "cw" IS NULL AND "replyId" IS NULL AND "hasPoll" = false AND "fileIds" = '{}' ) as "isQuoteOfSelf", "channelId" IS NOT NULL as "isChannel", "userHost" IS NULL as "isLocal", "localOnly" as "isLocalOnly" FROM "note" INNER JOIN "user" on "note"."userId" = "user"."id" LEFT JOIN "instance" on "note"."userHost" = "instance"."host" ) note_types ) type_counts

@rimu@piefed.social 87 million posts, actually!

Why would I possibly want that? ​​

One of my biggest pet peeves: when software documents the configuration file in extensive detail, but never fucking says where the file is

oh god, what did I do this time? ​​

@cwebber@social.coop if only we could have predicted this ​:neofox_pensive:​ /sarcasm

@soatok@furry.engineer oh, yeah I've had some rather alarming conversations with people I expected to understand this threat model. And a few people actually didn't believe me until I actually demoed it against my own account :/

@dmoonfire@polymaths.social @cwebber@social.coop that's exactly what they think lmao

wow TypeScript 7.0.2 is really broken, I'm definitely reverting back. A known-good project blows up with type errors because it (apparently?) isn't picking up @types/ packages from node_modules anymore. #TypeScript

WTF is using 64 GB of swap space on my laptop????

Just gauging public perception - if you learned that a Fediverse application did not support private boosts of public posts, would you consider that a privacy / federation risk? (For example, a followers-only boost of a public post would be converted to public by the backend server. Boosts of followers-only or direct messages would be ignored entirely.)

tip for running it: enable TCP keepalive in your SQL client, otherwise you might get a timeout after 5 minutes. If using DataGrip, this is hidden under the "advanced" connection settings, and you may also need to enable "keep-alive queries" and "SSH keep-alive" as well.

@rimu@piefed.social not sure, sorry. Sharkey doesn't track disk usage AFAIK