So this guy is now S3. All of S3

Post by naniwaduni » Fri, May 05, 2023, 12:35 AM UTC

rvz wrote: post #227

neoromantique wrote: post #205

Earlier quoted context omitted.

Mastodon is by design about small niche communities rather than centralised twitter alternative.

That is not the point. If someone sent any link or post that is from that Mastodon instance and it went viral, the entire instance will be sent to the ground and out for hours, making the post unavailable to be viewed. The worst part is journalists and the media have to be told that posting a link from a 'small niche community' on Mastodon will send a flood of traffic that will knock it down offline also giving the i…

Post by dbmnt » Fri, May 05, 2023, 12:51 AM UTC

matoro wrote: post #28

Ciantic wrote: post #5

Solution is also on the works like use /.well-known/, so this is more like funny, rather than a big problem. Key to trick was to have bucket named "xrpc" and store a file there: https://s3.amazonaws.com/xrpc/com.atproto.identity.resolveHa... There is also another funny thing in the image, the user posting about is sending one from "retr0-id.translate.goog", which is odd. Somehow he has got https://retr0-id.translate.…

Google Translate recently moved translated web pages to domains like this. If you plug a webpage into GT it will put the translated content under - .translate.goog. This user's actual domain is https://retr0.id

Post by x-complexity » Fri, May 05, 2023, 1:03 AM UTC

steveklabnik wrote: post #111

mikeryan wrote: post #104

Earlier quoted context omitted.

Bluesky was started within Twitter as a federated social protocol in 2019. Spun out in 2021 as a standalone company and it was also being used in the Crypto group at Twitter until Elon came in. I'm sure just because of its age and principals involved it's been heavily influenced by the crypto crowd. But suddenly, without anything else really stepping in to fill the void, it's the Twitter alternative of the day. Anywa…

> I'm sure just because of its age and principals involved it's been heavily influenced by the crypto crowd. It builds off of several specifications that came from the crypto crowd. It does not use a proof of stake or proof of work blockchain, though, so depending on how you use the words "crypto" and "blockchain," it either is or is not those things.

Post by mal-2 » Fri, May 05, 2023, 1:08 AM UTC

Yhippa wrote: post #276

mal-2 wrote: post #134

Earlier quoted context omitted.

[flagged]

None of these links work for me. 429's on all of them right now.

Post by akira2501 » Fri, May 05, 2023, 1:28 AM UTC

justin_oaks wrote: post #162

throwawaaarrgh wrote: post #116

Earlier quoted context omitted.

Both http and dns verification are stupid. Neither of them prove you own the domain. http verification proves you temporarily control IP space relative to a viewer. dns verification proves you temporarily control name resolution relative to a viewer. Both are trivially hacked, multiple ways. By the time someone finds out you did it ( if they closely monitor CT logs, which nobody does) you've already had hours, days,…

I can get behind registrar-level proof. And I can see why it won't happen, and it isn't because it's a bad idea. One problem I see is the extra overhead for the registrars. Now they have one more thing to do: verify (sign) certificate requests. That extra work is probably enough to get registrars to push back against such a system. The registrar would be assuming some of the functions of a CA. This would make it easi…