MMN-o ✅⃠ on social.umeahackerspace.se

This remote profile is registered on another site; see mmn's original profile page on social.umeahackerspace.se.

1. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 10:32:08 EST MMN-o ✅⃠

   Remote profile options...

   • drymer
   @drymer As long as we don't have simple TOFU (trust on first use) policies built-in to TLS clients, self-signed certificates are probably more bad than beneficial because they teach people to just ignore the (nowadays pretty scary looking!) warnings.
2. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 10:30:06 EST MMN-o ✅⃠

   Remote profile options...

   • catninja
   doge ninja
3. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 10:29:50 EST MMN-o ✅⃠

   Remote profile options...

   • pettter ✅
   @pettter Jag är helt ok med att få kramar från Jolla.
4. Perro Greato (perro)'s status on Monday, 22-Feb-2016 10:25:38 EST Perro Greato

   Remote profile options...

   • kat
   @kat Friendly UIs let you tab-complete.
5. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 10:19:41 EST MMN-o ✅⃠

   Remote profile options...

   • drymer
   @drymer Nothing should ever use #CSRF (cross site request forgery) as a feature and think they can get away with it :D
6. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 10:18:12 EST MMN-o ✅⃠

   Remote profile options...

   • Udda Boktips
   @uddaboktips Efter att ha raljerat om banker alldeles för länge och att USA och den nya världsordningen har skapat ISIS och att Tele2 ger dem gratis telefoner (genom att donera till nyanlända ensamkommande) så känns det som att herrn har kommit igång rejält. Vid 28min45s är det fett bra: Mobiltelefoner är jätteviktiga för mind control (genom bärvågen), …
7. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 09:51:49 EST MMN-o ✅⃠

   Remote profile options...

   • drymer
   @drymer It'll give a 401 unauthorized.
   Which kind of 3rd party plugins are you thinking about?
8. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 09:48:45 EST MMN-o ✅⃠

   Remote profile options...
   Rawrrr
9. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 09:46:46 EST MMN-o ✅⃠

   Remote profile options...

   • Udda Boktips
   @uddaboktips Den viktigaste sanningen är att i Syrien levde alla religioner i fred med varandra och folk flyr inte _från_ Assad utan _till_ hans regim. Det är bara västerländska media som smutskastar. Dessutom nämner han någon som skrivit ett datorprogram som kan spå lite i framtiden genom att interpolera (han menar nog extrapolerar från?) historiska data. D…
10. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 09:33:15 EST MMN-o ✅⃠

    Remote profile options...

    • pettter ✅
    @pettter I've got an account there, I'll fix it!
11. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 09:29:02 EST MMN-o ✅⃠

    Remote profile options...

    • drymer
    @drymer By XHR being unaffected I mean it was already protected against that (POSTs via javascript).
12. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 09:27:18 EST MMN-o ✅⃠

    Remote profile options...

    • drymer
    • undefined
    @drymer I just pushed a fix to !GNUsocial so POSTs against the API require an HTTP_REFERER value with the same domain as the site is served on (unless using OAuth) so forms on third party websites can't POST to an authenticated session. @0@quitter.is pointed out that this could be done (since !Qvitter changes require API access without OAuth using an ordinary session)…
13. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 09:17:14 EST MMN-o ✅⃠

    Remote profile options...
    Is it enough to check HTTP_REFERER to make sure someone is making a request from your own domain? I assume that privacy-aware browsers don't remove that header when sending requests to the same domain name.
14. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 07:30:38 EST MMN-o ✅⃠

    Remote profile options...

    • Udda Boktips
    @uddaboktips Detta är Sanningen.
15. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 07:29:47 EST MMN-o ✅⃠

    Remote profile options...

    • tuttle
    • drymer
    @drymer @tuttle Self-signed isn't much better than ordinary CAs. What would be cool to start using is #Monkeysphere! OpenPGP based web of trust for TLS certificates.
16. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 07:28:47 EST MMN-o ✅⃠

    Remote profile options...

    • tuttle
    @tuttle There's #LetsEncrypt of course, which (if you set it up, it's not necessarily automagical out of the box) can be automated to update certs just using a cron script.
    And then there's StartSSL, but you should be aware they're an Israeli company and thus supporting them might indicate support for genocide against palestinians.
17. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 05:30:57 EST MMN-o ✅⃠

    Remote profile options...

    • Snyltare
    @blast Mina sympatier går ut till dig som måste göra motsvarande mycket oftare!
18. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 05:30:09 EST MMN-o ✅⃠

    Remote profile options...

    • Snyltare
    @blast Så kände jag igår (fast jag hanterade riktiga 13-åringar i lördags, inte bara mentalt sådana). Har tänkt fortsätta på vilospåret.
19. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 05:14:37 EST MMN-o ✅⃠

    Remote profile options...
    Less is
20. MMN-o ✅⃠ (mmn)'s status on Monday, 22-Feb-2016 05:12:30 EST MMN-o ✅⃠

    Remote profile options...

    • tuttle
    @tuttle Actually, since everything supports SNI nowadays (part of TLS, and SSL is scrapped) you can use multiple separate certificates instead!

• After
• Before