I was curious as to the security context this runs in: curl -i 'https://porcini.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:j22nebhg6aek3kt2mex5ng7e&cid=bafkreic5fmelmhqoqxfjz2siw5ey43ixwlzg5gvv2pkkz7o25ikepv4zeq' Here are the headers I got back: x-powered-by: Express access-control-allow-origin: * cache-control: private vary: Authorization, Accept-Encoding ratelimit-limit: 3000 ratelimit-rema…
Blocking/allowlisting all JavaScript is the only way [1] to have a CSP fully contain an app (no exfiltration) [2] and with prefetch that might not be enough. The author is correct at the end to suggest using WebAssembly. (Also, it still has the issue of clicking links, which can be limited to certain domains or even data: by wrapping the untrusted code in an iframe and using child-src on the parent of the iframe) 1:…
This website is hosted on Bluesky
91–100 of 184 posts
Re: This website is hosted on Bluesky
#92Earlier quoted context omitted.
Bluesky’s attitude seems logical and their reasoning aligns with my thoughts exactly. If techdirt’s article is to be believed, Dorsey’s departure has to do with going from an extreme to an extreme—from a traditional social monolith to a pure protocol—whereas Bluesky chose to pursue not only the protocol, but also “the app” as the face of that protocol for the ordinary user, and let’s face it: the ordinary user does n…
What's your issue with invite-only periods? Is there a better way to throttle signups while you scale a system early on?
It worked with Orkut back in the day where the internet was new and untainted by culture wars.
Bluesky is lefty twitter now and I want no business with that platform.
Re: This website is hosted on Bluesky
#93I think the AT protocol is versatile in that users can acces each others data once authenticated without any centralized service (granted the aggregators and some other things may still be centralized).
Re: This website is hosted on Bluesky
#94Re: This website is hosted on Bluesky
#95There should really be a name for this phenomenon; put basically anything on the internet, and sooner or later people will try to host arbitrary files on it.
Re: This website is hosted on Bluesky
#96Whenever I hear about Bluesky I think about Jack Dorsey quitting their board and asked people to stay on Twittet/X. https://amp.theguardian.com/technology/article/2024/may/07/j...
Re: This website is hosted on Bluesky
#97Re: This website is hosted on Bluesky
#98Anyone else feels like this will be abused for phishing and/or malware distribution?
Re: This website is hosted on Bluesky
#99There should really be a name for this phenomenon; put basically anything on the internet, and sooner or later people will try to host arbitrary files on it.
Re: This website is hosted on Bluesky
#100I'm very hopeful for the possibility of using bluesky for blob data. A friend and I had considered looking into storing DOOM WADs on bluesky so that "map packs" could be shared in the same way posts are. Follow an account, a list, or a starter pack, and you could theoretically modify GZDoom or some other client to know how to search and view any WADs posted by those accounts. Like how the Steam Workshop works, except…