Ich finde ja, alle #filmfriend Bibliotheken sollten ihren Mitarbeitenden ermöglichen, "The librarians" während der Arbeitszeit anzuschauen und im Anschluss Raum zu geben, über das Gesehene zu sprechen.
So wie wir es gestern bei der Abschlussveranstaltung der #BiblioCon26 durften.

Jim Hacking to sue USCIS over Friday policy memo that wants to force immigrants to wait in home countries for green cards

Comes with a good explainer

He’s a very good at what he does

https://youtu.be/h4Kw2-87TTU

#uspol #immigration #uscis

It’s actually impressive that the bulk of maritime law has remained similar for the last few thousand years of human history

The law of cure means that a captain is responsible for the safety and health of crew, esp sick or injured crew — a captain is responsible for ensuring crew is restored to full health (from the 12th century Rolls of Oléron)

The law of General Average (from where we get the mathematical term) means that if a ship has to dump cargo/possessions to save itself, those who did not have their items thrown over must compensate those who did so the burden is shared evenly. This was actually called upon when the Ever Given got stuck! This dates back to 800 BCE??? That’s incredible longevity for law

And the most important law of all, which is that of rescue — if a vessel is in distress, any other nearby vessels must respond to assist, regardless of nationality. This is so old that I don’t know where it came from

Say hello to Fred. I named him b/c I keep seeing him in the same place on trail walks. At least I think it's the same guy. Okay I don't even know if it's a he. But I still call him Fred. Anyway, he looks big, here, but he's actually just a little bigger than a golf ball.

#fredtheturtle

Did you know EFF has had a top 4-star rating on Charity Navigator since 2013? We're committed to being transparent, and ensuring we make the most out of your donation. https://eff.org/spring

@rmondello *takes a long drag of a pixie stick while maintaining a three thousand yard stare* back in my day, ricky, we used to call these PUPs and they were seen as a bad thing. Now google will sell you a laptop and the operating system itself is adware

Changing your pfp needs pre-authorization for fedi accessibly needs 😭

This week's comic: The dangers of solar panels

#solar #energy #SolarPower

@catsalad I'm sorry :(

@phillycodehound This is exactly why I try to keep my stack as simple as possible. The constant anxiety of a single upstream dependency or sudden platform change wiping out years of indie work is exhausting.

compete with instagram? crazy.
open source and federated, no vc? crazier.
let you migrate your whole account out? wild.
open api so anyone can build a better app? insane.

1 million+ people say crazy works.

there's room for you too ⬇️

https://pixelfed.org

@malwaretech Good grief! Looks like I won't be doing that sweary grandma streaming I was thinking about

I can't wait to give my keynote at #FediCon later this summer!

It will be about https://joinloops.org, and how I basically rewrote the entire platform and mobile apps, created the project website, shipped ground breaking new features like the For You Feed algorithm, Starter Kits and Augmented Reality filters & more.

I did all that after I got home from FediCon last year. 😎

(I also shipped keyword filters, pinned posts + more to Pixelfed in the same period)

One wild year. So much progress 🚀

@neil

I still recall the moment I read the first article a few decades about someone who had invented the cookie. I was pretty upset knowing that it would lead to all sorts of malicious uses. Here we are and my concerns are validated.

It's whatever.

Avec les révélation sur le faux chiffrement de Whatsapp (oui vos données sont accessibles aux admins de Meta) j'aurai dû immédiatement les cancel mais littéralement tout mon cercle social utilise cette appli de malheur : famille, amis, collègues 😬

The mistake of believing you are the bigger thing: thoughtshrapnel.com

FEP-fe34 (Origin-based security model) update : https://codeberg.org/fediverse/fep/pulls/849

I tried to better explain the assumptions on which the model is based, and clarified how exactly origins should enforce boundaries between actors:

Servers MUST ensure that activities published by a client do not represent unauthorized actions. This includes activities embedded within other activities and objects.

Servers MUST NOT allow clients to publish activities where embedded objects are owned by another actor.

Lemmy API and Mastodon API implementers don't have to worry about this, but one needs to be very careful when accepting arbitrary payloads from clients, for example, when implementing ActivityPub C2S API or FEP-ae97 API. Unfortunately, these security issues are completely ignored by people who push for wide deployment of ActivityPub C2S API.

Another addition is the recommendation to not use partially embedded objects, because that might lead to cache poisoning:

Embedded non-anonymous objects SHOULD NOT be partial representations. A server that relies on embedding for authentication might save a partial representation of an object to the cache, replacing the full object.

(see this issue for details: https://codeberg.org/silverpill/feps/issues/21)

#fep_fe34 #activitypub