toofy is a user on mastodon.social. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.

toofy @toofy@mastodon.social

toofy boosted

Does anyone know if there's a #biohacking scene on mastodon? Looking to design some experiments and want to see if there's more literature than I'm aware of on the subject.

toofy boosted

[Not ITsec] I am helping to set up a small bookshop and am looking for a CRM/inventory management system which tracks books in stock, on order, sales, clients, subscriptions, etc. I have looked at both SuiteCRM & Odoo but to get anything done you need at least €100/mth which is more than current net profits :( Odoo community, for example, does not allow customisation which is essential.

I would be grateful for any hints/help.

toofy boosted
So the mastodon.social privacy policy is ok, but if I were the maintainer I'd avoid recording any IP addresses. One thing to consider is that when you're a meganode both state and non-state organisations will become interested in your logs and will try to obtain them either explicitly, with goons showing up and making threats, or also less explicitly with implants and exfiltration or NSLs and gagging orders. If you don't record IPs then in the worst case there's not much that third parties can get.

Another factor to consider is that the demographic of fediverse folks probably includes a higher proportion of non-normative views and lifestyles than you might find in the silos. These non-normative people are precisely the groups which the really bad guys always seek to target. So as maintainer you should be concerned with your user's interests and practice metadata minimization which can limit any potential damage.
toofy boosted

Ultimately Mastodon's killer feature is that it's a public good that someone built because they thought it needed to exist and not a startup someone built because they wanted to get rich quick selling other people's data.

toofy boosted

Facebook: run by Peter Thiel, who wants to drink young people's blood

Mastodon instance: run by that cool goth girl from your CS class, who may have cosplayed as a vampire once but probably doesn't drink real human blood

toofy boosted

Maybe anticapitalist.party is the politically engaged Mastodon instance I've been hoping for

toofy boosted

I aint' sayin that Mastodon doesn't have problems to overcome, or that its perfectly but right now, I'm rather enjoying it. I'd just like to see where this goes without some dipshit in the valley telling me what I should and should not like.

toofy boosted

About risk profile:

- Mastodon is like email because you can't delete federated toots
- Mastodon is like twitter in that Google's search bots index it, unless your admins robot.txt it away
- Mastodon is like being a teenager because the people that own your instance can see all your private stuff

Have a talk with your admin about their policies.

By default, assume everyone will be able to read your toots forever.

toofy boosted

@puellavulnerata @johnhenry @maradydd Perhaps the way to think of it is not "identity networks" but "distributed synchronized directories/indexes" or "trust chain namespace authorities."

If uniqueness is all that matters, that's a pretty soluble problem. Authentication is much harder. (Webfinger doesn't solve either of these; it's just a lookup protocol.)

Anyway, listen to Andrea, she's lived this. :)

toofy boosted

So, about this Mastodon thing (still learning):
- mastodon.social is to Mastodon what gmail.com is to email,
- like in email @usernames are only unique within a given server,
- MAXLEN=500 here,
- RTFM: github.com/tootsuite/mastodon/
- enough people already asked about end-to-end encrypted DMs. There are no.
- no one asked about e2e signed toots though yet?
- if you believe you're trustworthy enough, consider using the ✅ character to let others know they can trust you.

toofy boosted

this is an excellent point about one advantage of decentralized systems that i hadn't thought about: icosahedron.website/users/chri

Its nice stumbling upon people from the twitter feed. Saves work and gives hope that this move may stick.

toofy boosted

Guys, masto is under a heavy load right now and it's gonna get a lot heavier soon. Remember that one guy is doing almost all the work. Help your boy Eugen out if you can: patreon.com/user?u=619786

toofy boosted

Hello friends, I'd just like to interject here for a moment.

Eugen needs money to live, and mastodon.social has server expenses, but money doesn't write code by itself. There's still 183 open issues on the Mastodon project github.
github.com/tootsuite/mastodon/

Writing a code patch to fix a problem or work in a feature helps not just mastodon.social, but also everyone else running Mastodon, too, and you'll have @Gargron's gratitude, and all the other devs' too.

Love, Trev

api looks great too...

yay! term client comin up.

loving this so far. hope the api is relatively open.

toofy boosted

Weaknesses / feature gaps observed so far:

1.) use of federated instances to separate social norm boundaries is good, but binding identities to a particular instance is more concerning for network effects reasons

2.) Particularly given that choice, TweetDeck-style support for picking which of several identities to post something under would be desirable.

toofy boosted

Don't like the code of conduct on mastodon(.)social? Download a copy of Mastodon and run your own with the code of conduct you see fit or get an account on another that is already running that is more lenient. Hell, shitposter(.)club is one example of what you can do in this federation (though the software they run isn't mastodon but you can still do the same) .

Anyway, if you want to run your own here it is.
github.com/tootsuite/mastodon