worst part is the whole "but we HAVE to allow this undefined behavior because *waves hands frantically* all this software that exists relies on it and it will break"
OK fine. But just give me a MODERN compiler that is smart enough to say "no, don't do that" and make me find a safe way to accomplish the task. Even if it's violating "the standard" and "not really C anymore" -- I don't care. Just give us the safetybelts and bumpers and let the high performance computing folks do their thing in unsafe C.
If such a thing existed I wouldn't be afraid of doing things in C.
Zig should have been created 20 years ago, but the reality is probably that things that must stay C because the effort is too big to rewrite we'll ensure those applications are on CHERI CPUs which fix C's security issues in hardware.
@reto well I should clarify: it DOES but it uses your MySQL client's default encoding
and the default client encoding is latin1 or whatever, so that's what it uses and that's what it puts into the dump. It literally converts the data from e.g., utf8mb4 to latin1 during the dumping process
@aral@yarmo Happy New Year to you as well! (in earnest)
I love poking people about this, but the fear is overblown. We've had like 27 years of BSD licensed software (since original BSD 4.4 release) and I can only think of maybe a max of 10 Silicon Valley companies that "took the code and got rich off it, giving nothing back" but I can think of a considerably higher number that actually contribute back changes because it's in their best interests financially to not have to constantly chase upstream changes
@aral@yarmo I still adhere to the notion that the best way to get corporations to stop reinventing the wheel poorly is to write good software with no strings attached
(also corporations are people, which is sad but true)
Black man asks woman to please leash her dog, he's there bird watching and the dog isn't supposed to be off leash.
"I'm taking a picture and calling the cops," Amy Cooper is heard saying in the video. "I'm going to tell them there's an African American man threatening my life."
and then:
"I'm not a racist. I did not mean to harm that man in any way," she said, adding that she also didn't mean any harm to the African American community.
OHHHH she's not a racist, you just threaten to have the cops come and shoot him
@ilja@tek "only public posts are scraped" -- that's not entirely true. It also captures every follow, every block, etc. When you use a relay your database ingests a ton of garbage in it that exposes sensitive metadata/interactions between other people.
Followbots can only get public posts unless you DM it, and then of course "followers-only" (ActivityPub: "private") but that's basically public with a narrower scope but you've set yourself up for massive leakage of that data if you have a nontrivial amount of followers. It should really just be considered "public but can't boost".
If you delete your posts and your account on Twitter they're not actually gone. If you register the account of the same name again people can respond to old tweets and end up tagging you in the reply somehow.
I think deletes just hide the post and they failed to filter out my account because it's active again.
@mewmew@er1n If your goal is to be hidden from search engines you'll have things like valuable technical discussions lost forever.
Yes you deserve the right to be forgotten.
Yes you deserve to be anonymous if you want to be.
Yes you deserve ownership and control over your data as much as is technically feasible. (e.g., once it leaves your machine... all bets are off, sorry)
If what you think you need is to be hidden, you're not a social network and you're not helping us create a solution to end the digital tyranny the other 7 billion of us face on a daily basis.
I want AP to liberate 7 billion people from algorithmic manipulation and corporate-sponsored censorship.
I want AP to bring back what communicating with friends was like in the 90s and early 00s.
It's going to take money, time, blood, sweat, and tears.
Yes, money. I know people get very distracted by the fact that there's money flowing into ActivityPub's development. This is a requirement if we're going to get this off the ground. I can't think of a single widespread protocol we consider foundational to our daily lives that didn't have money behind it.
The internet itself (TCP/IP) was not birthed by some free software zealots. It was billions of dollars of military research brought to the public. Some people might even hate the military that did it!
The Web was also not birthed by free software zealots. It was done at CERN. On a NeXT machine. Some people might even hate the countries funding CERN, or Steve Jobs/Apple.
This lead to Mosaic and then Netscape.
"Netscape was the first company to attempt to capitalize on the nascent World Wide Web."
Mozilla is now the darling of the internet, but it was born out of capitalism. I'm sure the thought of this is offensive to some people. Most don't even recognize the fact.
The point is, we need a good protocol with a healthy standards body of members participating from MANY projects because diversity is strength and we cannot have a single member trying to throw their weight around and control how the protocol is developed. And if we don't care about doing security right we will fail.
I don't know how to bring everyone together to solve this, but I know damn well that Mastodon's goals are directly at odds with the rest of us right now. I hope they come around though because we'll be stronger together.
Your SQL server should not listen on an unprotected network port. Turn that off and use a Unix socket. You can use sshfs to securely access the socket from your web servers.