Katson Jukka Lindströmin Sivuhistoriaa YLE Areenasta ja tämähän on vallan mainio. Tää on edellisen hallituskauden aikana tehty, niin naurattaa kun "Harva muistaa tätä miestä, hän on Petteri Orpo". Olispa niin.

This Saturday, I’m speaking at @vanlug about the #Fediverse.

It will be held at Burnaby Public Library during 2PM-4PM.

Want to attend? Here’s where to register:

https://luma.com/ahm1hi2s

#VanLUG

@milo you're literally potted

Fiddled with Vivaldi mobile a little bit.

It's got Actual Tabs, but they don't scroll, they just get smaller as you open more websites 😑

Third-party cookies are enabled by default???!

You can turn off javascript, but then there's no easy way to turn it on for shit sites that don't work without it. You've got to go like three layers deep in a settings menu, it's not gonna happen. On Naked Browser you just long-tap the refresh button and that's it, the site loads again with JS and the browser remembers for next time.

Other than that it seems like it's got the basics covered, it's a great browser for people who don't use NBPro and I'm just generally horrifically spoiled

@hipsterelectron I'm mildly curious but half of the fun would be to write the app :)

If what 'split domains' mean is "running #snac in subdomain.example.com but identify as accounts from example.com" then no, it's not supported.

But, you can have snac running from a subdirectory of your main domain (which, as far as I know, no other fediverse implementation does). I.e. you can have your snac root in example.com/social and then you can identify as you@example.com . So you have no unnecessary subdomain just to be you.

Which is what I do for this very domain.

CC: @mms@bsd.cafe

@Brendanjones Yeah, I think your right for most companies. But I think this is a model for bigger more complicated companies. How do you make Coca-Cola a co-op?

Little project I've been working on for the past two days. A reverse engineered implementation of the Android Auto server, running on my OnePlus 6 with PostmarketOS. The implementation is incredibly basic, only has basic video, but it's enough to display Sway and firefox :D

Next major step is getting it to work on a "proper" headunit. It works with my generic Chinese portable Android Auto / CarPlay screen but on a proper Toyota headunit inside a 2019 Toyota Aygo it fails somewhere along the way on the authentication chain.

#postmarketos #mobilelinux

Baltics Rebuke Russia for ‘Disinfo’ on Ukraine Drone Incursions
https://www.bloomberg.com/news/articles/2026-05-21/baltics-rebuke-russia-for-disinfo-on-ukraine-drone-incursions?utm_source=flipboard&utm_medium=activitypub

Posted into Emerging Markets @emerging-markets-bloomberg

Onko täällä sähköstä tietäviä ihmisiä?

Mulla on ilmalämpöpumppu, joka hajosi ylijännitteen vuoksi. Siihen on ilmeisesti mennyt ~400 V ja palojälkiä on kaapelin vieressä.

Kysymykseni on, miten tällainen ylijännite voi muodostua niin, että

1. se rikkoo vain yhden laitteen ja
2. yksikään sulake ei pala?

Luulen, että tähän liittyy töhö sähköasentaja, mutta keksikää mulle ensin mahdollisia tapahtumaketjuja, miten yksittäinen laite voi saada tuollaisen virtapiikin.

#sähkö #kysyFedistä

I'm very happy to see how my 3-year journey replacing big tech with privacy-oriented, humane platforms is shaping:

Gmail: Tuta and Proton

Google Calendar: Fossify

Google Maps: Organic Maps

Twitter: Mastodon

Facebook, Instagram: Pixelfed

WhatsApp, Telegram: Signal

Android: GrapheneOS

Windows: Linux Mint

It was overwhelming, it took time and research. But I can tell you that another digital experience is possible.

Now I'm thrilled to have devices that belong to ME, like in the old days.

@farah 🫂

Fiddled with Vivaldi mobile a little bit.

It's got Actual Tabs, but they don't scroll, they just get smaller as you open more websites 😑

Third-party cookies are enabled by default???!

You can turn off javascript, but then there's no easy way to turn it on for shit sites that don't work without it. You've got to go like three layers deep in a settings menu, it's not gonna happen. On Naked Browser you just long-tap the refresh button and that's it, the site loads again with JS and the browser remembers for next time.

Other than that it seems like it's got the basics covered, it's a great browser for people who don't use NBPro and I'm just generally horrifically spoiled

@joachim Django girls en France est bien actif a ma connaissance

@Tutanota @firefox @duckduckgo @puffin @Waterfox @ecosia @palemoon @zenbrowser @mullvadnet @torproject @Freenet @librewolf been using librewolf for years, couldnt be happier with it and dont imagine myself using any other browser any time soon!

New from 404 Media: in December a freshman boy allegedly made AI explicit videos of five 9th grade girls. Soon, the whole school had heard. Read this deeply reported account of how deepfakes tore a high school apart

“The entire school knows about it.”

https://www.404media.co/radnor-high-school-pennsylvania-ai-deepfakes-child-sexual-abuse-material/

So so proud of team @standard.site@bsky.brid.gy → @aka.dad@bsky.brid.gy , @schlage.town@bsky.brid.gy, @brookie.blog@bsky.brid.gy , @cozylittle.house@bsky.brid.gy , @awarm.space@bsky.brid.gy and everyone else involved for this and the Wordpress news. Y’all are keystones of this community, and your success is our success. ❤️

RE: https://bsky.app/profile/did:plc:3jpt2mvvsumj2r7eqk4gzzjz/post/3mmd44oa6g22u

Fumetti 2026 ça commençait hier au soir à Nantes. Ça continue. Il faut y aller. https://www.maisonfumetti.fr/festival-fumetti-2026/

BotKit security updates: 0.3.3 and 0.4.2

If you use BotKit, update to a patched release now. CVE-2026-42462 affects Fedify's Linked Data Signature handling, and BotKit inherits the exposure through its dependency on Fedify.

The vulnerability allows an attacker to use JSON-LD graph-restructuring features—specifically @graph, @included, and @reverse—to reshape a signed ActivityPub activity without invalidating its Linked Data Signature. This can cause BotKit (via Fedify) to interpret a different ActivityPub object shape than was originally signed. The fix normalizes Linked Data Signature-verified activities against Fedify's local JSON-LD context before interpreting them, and rejects the JSON-LD constructs that enable the attack.

All versions of BotKit up to 0.3.2 (in the 0.3.x branch) and 0.4.1 (in the 0.4.x branch) are affected. Patched releases are 0.3.3 and 0.4.2.

For BotKit 0.4.x, update @fedify/botkit:

npm update @fedify/botkit
yarn upgrade @fedify/botkit
pnpm update @fedify/botkit
bun update @fedify/botkit
deno update @fedify/botkit

For BotKit 0.3.x, update @fedify/botkit:

npm update @fedify/botkit@0.3.3
yarn upgrade @fedify/botkit@0.3.3
pnpm update @fedify/botkit@0.3.3
bun update @fedify/botkit@0.3.3
deno update @fedify/botkit@0.3.3

If you use other BotKit-related packages (e.g., @fedify/botkit-postgres), update them as well. After updating, redeploy.

The CVE ID is CVE-2026-42462. See also fedify-dev/fedify#773 for Fedify's own announcement.

Thanks to @Claire for the report and responsible disclosure.

If anything is unclear, feel free to ask on GitHub Discussions or Matrix.