Pinned toot

I never did an , so here goes:

β€’ I like and am the developer of @ObjFW
β€’ I'm interested in obscure CPU architectures and *enjoy* writing assembly for them (weirdest in my collection are , and πŸ™‚)
β€’ I'm into obscure OSes (e.g. )
β€’ I collect retro hardware
β€’ I am an :xmpp: advocate (decentralized & federated like Mastodon!)
β€’ I mostly use :apple_inc:, @openbsd :openbsd: and :netbsd: as a daily OS
β€’ I am also a @haiku πŸƒ developer

Mastodon culture persists in telling people what to do: "tag your non-english language use!" "CW this, CW that" etc etc etc

@JPEG Mast still scrolls all the way to the top every time I open it. It even starts at the right place, I can see it for a split second, but then it immediately scrolls up.

One of the biggest things that bugs me about Discord's creeping monopoly on communication is the terminology they've got people to use. It's all "a Discord", "our Discord", "a Discord server" - like it's something you get to have, when it's them that gets to have you and your community as an asset to turn into money. Fuck that shit.

Yeah, I think I have Strong Opinions on this topic. :awesome:

So ganz gehen den Spammern die Ideen immer noch nicht aus: "Subject: Wir geben Ihnen 2 Kilo Mandarinen" #email #spam 🍊

I'm liking RISC OS on Raspberry Pi so far. You can boot to the desktop in like 5 seconds and everything feels snappy once you're there. It's also fun to learn about a non-Unix OS.

I just found @Gargron's github.com/Gargron/xmpp-web. Are we finally getting an web client with a neat UI? That would be awesome :).
Converse.js is nice, but the UI is not what most users expect.

I'd just like to interject for a moment. What you're referring to as GNU/Linux is in fact GNU/Linux/systemd/xorg/KDE/Gnome/xfce/fluxbox/tmux/Mozilla/chromium/dillo/lynx/vim/emacs/mutt/alpine/vlc/mplayer/cmus/abiword/libreoffice/gimp/inkscape/blender/python/perl/ruby/lua/erlang/git/mercurial/bzr/subversion/mysql/postgresql/sqlite/festival/pidgin/...

:flan_set_fire:

Mastodon exclusive: Wanna play with Multics?
1. http://50.78.42.87 login multics pw multics
2. ssh [email protected]
3. Press RETURN
4. type login Tourist (note case)
5. Password is tourist
6. Watch the blinking lights!

Please RT if you want.

@js damn right, I've been saying XMPP needs a catchy brand for years, or at least a solid reference implementation of a client suite under a BSD license that has a catchy name.

@js Matrix is basically what happens when HN-type webdevs try to reinvent XMPP. Some things are great, others are questionable, overall it's just broken.

@hj @kaniini

@bobstechsite @js IMHO, lack of decent client software is killing it, not Google or Facebook's lack of involvement.

Google stalled things for years, by NOT dropping support and leaving a bunch of service operators unable to improve things as Google wouldn't pick up on changes, and nobody would break compatibility with Google.

It was kinda liberating to see them fuck off.

And is so bad that after a while it starts taking 100% CPU for doing nothing, and everything gets unresponsive. Only restarting it failed.

Oh, and the media_repository always has a SIGBUS after a while. Although it’s written in Python! Not running media_repository as a worker kills the entire thing.

Oh and the only server implementation for is . Doing everything in a single thread because Python. And with the workers the main process is still single threaded and the bottle neck. I spent 4 days optimizing it. And while I got it an order of magnitude faster by outsourcing as much as possible to other processes, it’s still far from enough.

If you repeat that a million times, all Matrix servers are basically busy sending a million requests to your target. Repeatedly.

You sent out 1 mio HTTP requests, and your target will now constantly receive 2000 - 5000 times that. That's a pretty big amplification attack.

To elaborate on this, here's an algorithm how to DDoS someone and break the Matrix network at the same time:

* Get a domain
* Get a wildcard certificate
* Spawn a stripped down instance with $randomname.yourdomain.org that can only talk to matrix.org.
* Send a join to :matrix.org
* Redirect $randomname.yourdomain.org to your target you want to DDoS
* Kill the instance, repeat with another $randomname

Now 2000 - 5000 servers will constantly hammer your target with TLS handshakes.

I tried hard to use . After wasting a week on it, I just had to give up. The protocol is just too bad, and the federation design is broken. It's impossible for me to run a server due to this. The Matrix protocol *by design* is the largest DDoS amplification attack vector I have ever seen. Until they fix that, I cannot use it. And it doesn't seem to be a priority to fix it, it's just "Would be nice if we would fix it some day".

Hm, -current ports for SPARC64 currently cannot be installed on -current: There was a libc bump 2 weeks ago. Anybody an idea when they get rebuilt, or if they get rebuilt at all?

@js IMO, for instant messages, we should just continue working on XMPP or make a spec that takes most of things from modern XMPP and reimplement it with newer technology (websocket, json, etc.)

Or we could go another way and think of something using Activitypub as medium and implement modern XMPP's features (like OMEMO, MAM, carbons, editing, etc.) to try and reach full communication convergence.

Anyhow, we have a lot to learn from XMPP.

Show more
Mastodon

Fast, secure and up-to-date instance, welcoming everyone around the world. Join us! 🌍
Up since 04/04/2017. βœ…

Why should you sign up on mstdn.io?

This instance is not focused on any theme or subject, feel free to talk about whatever you want. Although the main language is english, we accept every single language and country.

We're connected to the whole ActivityPub fediverse and we do not block any foreign instance nor user.

We do have rules, but the goal is to have responsible users.

The instance uses a powerful server to ensure speed and stability, and it has good uptime. We follow state-of-the-art security practices.

Also, we have over 300 custom emojis to unleash your meming potential!


Looking for a Kpop themed instance? Try kpop.social