🆕 blog! “Is it possible to allow sideloading and keep users safe?”

In which I attempt to be pragmatic.

Are you allowed to run whatever computer program you want on the hardware you own? This is a question where freedom, practicality, and reality all collide into a mess.

Google has recently announced that Android users will only be able to…

👀 Read more: https://shkspr.mobi/blog/2025/08/is-it-possible-to-allow-sideloading-and-keep-users-safe/

#android #google #rant #scam

🆕 blog! “Is it possible to allow sideloading and keep users safe?”

In which I attempt to be pragmatic.

Are you allowed to run whatever computer program you want on the hardware you own? This is a question where freedom, practicality, and reality all collide into a mess.

Google has recently announced that Android users will only be able to…

👀 Read more: https://shkspr.mobi/blog/2025/08/is-it-possible-to-allow-sideloading-and-keep-users-safe/

#android #google #rant #scam

I don't know which genius at #Google thought it was a good idea that swiping the right side of the screen on #Android goes 'Back'

It's so sensitive that I accidently go back several times a day. What's the gesture to go forward? Who knows?!

You can disable swiping actions, but that disables everything and swiping from the left of the screen to go back is actually useful (and the same as iPhone) and never accidentally triggered.

#technology #rant

Hmm, looks like the login process in the mastodon.el is complicated AF.

Two possible places to store the credentials: ~/.authinfo.gpg and ~/.emacs.d/mastodon.plstore (both support GPG encryption).

When I make first login the mastodon.el asks me about passphrase then about password drgn_think_woozy . Both entered strings should match.

After some experiments I realized that it asks me not about my #Mastodon password but about passphrase to unlock my GPG key (twice drgn_knife_angry , then other programs, like Magit or pass frontend doing this only once).

Then, I successfully logged in by entering GPG passphrase twice, entering authorization code from Mastodon instance to authorize mastodon.el and entering the GPG passphrase to store necessary credentials in the /.emacs.d/mastodon.plstore (twice again drgn_knife_angry ).

The official documentation states that mastodon.el will store credentials in the /.authinfo.gpg since 2.0.0, but this is not true drgn_knife_angry . I'm using version 2.0.2 from NonGNU ELPA and it is still saves all credentials to the aforementioned mastodon.plstore. Despite my auth-sources is:

("/.authinfo.gpg" "/.netrc")

After I restart Emacs and enter M-x mastodon, I got:

Decrypting /home/drag0n/.emacs.d/mastodon.plstore...done
Loading home timeline...
Contacting host: mastodon.bsd.cafe:443
Loading fediverse account nil on https://mastodon.bsd.cafe...
error in process filter: mastodon-tl--init*: Looks like the server bugged out: "The access token was revoked"
error in process filter: Looks like the server bugged out: "The access token was revoked"

While I didn't revoked access token, it is still visible in the Mastodon settings, in the list of my authorized applications.

And both mastodon-instance-url and mastodon-active-user have valid values, pointing to the my actual account.

0/10 will not recommend drgn_knife_angry

#Emacs#Mastodon #rant#TechRant

After a little investigation, I found that I was wrong. The problem is not with mastodon.el. Looks like my instance somehow won't accept access_token, issued by the /oauth/token, if this token was stored and reused e.g. after Emacs restart.

BTW, if I try to get the access_token by hand, via the Librewolf DevTools, then the server won't give me any token, saying that "The provided authorization grant is invalid" drgn_think_woozy

https://codeberg.org/martianh/mastodon.el/issues/732#issuecomment-6580210

@stefano

#Emacs#Mastodon#MastodonAPI #rant#TechRant

Hmm, looks like the login process in the mastodon.el is complicated AF.

Two possible places to store the credentials: ~/.authinfo.gpg and ~/.emacs.d/mastodon.plstore (both support GPG encryption).

When I make first login the mastodon.el asks me about passphrase then about password drgn_think_woozy . Both entered strings should match.

After some experiments I realized that it asks me not about my #Mastodon password but about passphrase to unlock my GPG key (twice drgn_knife_angry , then other programs, like Magit or pass frontend doing this only once).

Then, I successfully logged in by entering GPG passphrase twice, entering authorization code from Mastodon instance to authorize mastodon.el and entering the GPG passphrase to store necessary credentials in the /.emacs.d/mastodon.plstore (twice again drgn_knife_angry ).

The official documentation states that mastodon.el will store credentials in the /.authinfo.gpg since 2.0.0, but this is not true drgn_knife_angry . I'm using version 2.0.2 from NonGNU ELPA and it is still saves all credentials to the aforementioned mastodon.plstore. Despite my auth-sources is:

("/.authinfo.gpg" "/.netrc")

After I restart Emacs and enter M-x mastodon, I got:

Decrypting /home/drag0n/.emacs.d/mastodon.plstore...done
Loading home timeline...
Contacting host: mastodon.bsd.cafe:443
Loading fediverse account nil on https://mastodon.bsd.cafe...
error in process filter: mastodon-tl--init*: Looks like the server bugged out: "The access token was revoked"
error in process filter: Looks like the server bugged out: "The access token was revoked"

While I didn't revoked access token, it is still visible in the Mastodon settings, in the list of my authorized applications.

And both mastodon-instance-url and mastodon-active-user have valid values, pointing to the my actual account.

0/10 will not recommend drgn_knife_angry

#Emacs#Mastodon #rant#TechRant

Hmm, looks like the login process in the mastodon.el is complicated AF.

Two possible places to store the credentials: ~/.authinfo.gpg and ~/.emacs.d/mastodon.plstore (both support GPG encryption).

When I make first login the mastodon.el asks me about passphrase then about password drgn_think_woozy . Both entered strings should match.

After some experiments I realized that it asks me not about my #Mastodon password but about passphrase to unlock my GPG key (twice drgn_knife_angry , then other programs, like Magit or pass frontend doing this only once).

Then, I successfully logged in by entering GPG passphrase twice, entering authorization code from Mastodon instance to authorize mastodon.el and entering the GPG passphrase to store necessary credentials in the /.emacs.d/mastodon.plstore (twice again drgn_knife_angry ).

The official documentation states that mastodon.el will store credentials in the /.authinfo.gpg since 2.0.0, but this is not true drgn_knife_angry . I'm using version 2.0.2 from NonGNU ELPA and it is still saves all credentials to the aforementioned mastodon.plstore. Despite my auth-sources is:

("/.authinfo.gpg" "/.netrc")

After I restart Emacs and enter M-x mastodon, I got:

Decrypting /home/drag0n/.emacs.d/mastodon.plstore...done
Loading home timeline...
Contacting host: mastodon.bsd.cafe:443
Loading fediverse account nil on https://mastodon.bsd.cafe...
error in process filter: mastodon-tl--init*: Looks like the server bugged out: "The access token was revoked"
error in process filter: Looks like the server bugged out: "The access token was revoked"

While I didn't revoked access token, it is still visible in the Mastodon settings, in the list of my authorized applications.

And both mastodon-instance-url and mastodon-active-user have valid values, pointing to the my actual account.

0/10 will not recommend drgn_knife_angry

#Emacs#Mastodon #rant#TechRant

alcinnz
Bjørnar (he/him)
Jess Mahler
alcinnz and 2 others boosted

Need to vent, sorry. I just reached the top of frustration for today!!!!1111oneoneone

The entire fucking day I have been busy preparing the servers (again) for new backup and staging for disroot. And, boy it’s been going horrible. Working with old server is just such a fucking pain. I feel like an alchemist or some nuclear physicist Those machines are so fragile, that one minute everything is fine and the second it’s not booting. Or the memory breaks or some other shit…. I have bunch of the oldies and parts and trying to ducttape two working and stable servers and it’s fucking impossible! Not to mention no fucking firmware available anywhere (g11) cause dell decided to just remove ‘em (no mirror no nothing, just gone and fuck you!).
And now just as I thought I was ready to install OS, one just started spinning Fans like crazy and got slow as hell, probably due to faulty cpu or ram. And second one, upon adding secondary SAS cable, just stopped POSTING! Fuck! I hate this old shit!!! It’s been great but it’s time to annihilate ‘em and throw it into a bin damn it! Wasted entire day on this and looks like I have not move a bit. Didnt do a mountain of other work piling up in the meantime, I just could spend entire day in bed playing games and doing nothing and I would be in the same place I am right now after working the entire day! Feel like crying myself to sleep right now, with a pillow over my face screaming until oxygen cuts off! #rant

I love cats, but I am extremely allergic to them.

There are no cats at the house I stay officially, but there is a pack of stray cats that roam around and show up at night when our dog isn't roaming around the yard.

They really like chilling on the couch back there I discovered...

... I fell asleep with bare arms on the couch for a while as it was warm outside last night. I now have hives all over my arms, and need to go get itch cream before I scratch my skin away.

#writing #health #rant

deutrino
ajuvo ✔
Rachel Lawson
deutrino and 2 others boosted

I'm never going back to Matrix

https://shkspr.mobi/blog/2025/07/im-never-going-back-to-matrix/

I should love Matrix. It is a decentralised, privacy preserving, multi-platform chat tool. Goodbye Slack and your ridiculous free limits. Adiós Discord and your weird gamification. Suck it IRC with your obscure syntax and faint stench of BO. WhatsApp and Telegram can stick their heads in a bucket of lukewarm sick and sing sea shanties! Let's join the future!

The problem is - Matrix is shit. Not just on a protocol level, but on an organisational level as well.

I joined Matrix at FOSDEM - the largest gathering of open source nerds in Europe. We were all encouraged to use it - every talk had its own channel, all the official comms came from there, I was even invited to a top-secret private channel for speaker. This was going to be epic! Viva la rèvölūçïón, right? Wrong.

It was dead. Even among the most seasoned geeks on the planet, most people preferred to use other services like Signal, Telegram, and Slack. Why? Because those other tools actually work.

Matrix has two official Android apps - one of which is old and unsupported, the other is new and doesn't work with many of the basic chat features.

I want to be absolutely clear about this - the company behind Matrix have put out an app which doesn't work with their own product! Lest you think I'm exaggerating, here's a typical view of the official FOSDEM speaker room, using the official Matrix app:

A list of errors saying "Unsupported Event".

It was embarrassing. People would pipe up in channels and say "this doesn't work" only to be told they were using the wrong app and should go back to the one marked unsupported. So they left, never to return. Even in the large talks, where people were encouraged to use the official Matrix chat, most of the conversation happened on other platforms. It was just too hard to use Matrix.

A few thousands geeks, all used to recompiling their own kernels and participating in the Fediverse, and most thought that Matrix was too much of a faff.

After FOSDEM, I kept the Matrix app on my phone. Occasionally receiving a ping from some long-forgotten channel.

And then, one day, I got hit with the most vile spam. A dozen notifications suddenly appeared on my phone with abuse, torture, and transphobic slurs in them.

You can view the screenshot - but, fair warning, it is grim.

This shouldn't be possible. It doesn't take an expensive team of moderators to add some keyword monitoring. It doesn't take a massive AI model to work out that a stranger shouldn't be able to bombard users with multiple notifications. You don't have to sacrifice your dream of a decentralised future - you just need to care about your users.

This stuff is basic.

I moaned about it on Mastdon and was surprised to receive a private reply from the official Matrix account.

Please do not encourage the spammer by giving them a platform and propagating their spam; you may want to consider deleting your post.

This is classic victim blaming. It is my fault for giving the spammer attention. I am the one who needs to take responsibility and delete the evidence. I shouldn't warn people that Matrix is actively dangerous to use.

Bullshit.

Here's what I expected them to say:

"We're sorry you had such a bad experience on Matrix. Rest assured we're working hard to block these spammers - here's a link to show what we're doing. You can protect your account further by doing x, y and z. Once again, sorry and we hope we can win back your trust."

I'm not saying scrappy open source projects have to hire anodyne corporate communications specialists; they just need to have a little empathy.

But, no, just constant whining about how it isn't their fault and how I am the one who needs to change my behaviour.

This is pretty typical behaviour from the team. Find any post complaining about some aspect of Matrix and you'll see their instant woe-is-me replies.

So I deleted the app. I would have liked to have nuked my account but apparently that's not possible.

I'm not the only one who feels like this. Here's an epic post by Marius, which concludes:

Between the slow performance, the increasing amount of spam, the miserable web client, and the unfinished state of Element X, the Matrix.org network is not something I am willing to continue to recommend, especially to non-technical users. Normal people are simply tolerating it to communicate with idealistic nerds like myself who insist(ed) on using it.

Matrix just isn't focussed on users. I'm not talking about user-experience tweaks like which shade of cornflower blue to use - I mean basic user needs like apps that work and a way to combat spam.

There's a long list of ways the protocol contributes to a poor user experience. It almost seems designed without regard for how it will actually be used.

While the protocol may be conceptually interesting and their intentions noble, I'm not prepared to suffer abuse in the name of technical purity.

Open Source and Open Standards nerds like me ought to know by now that the protocol is the least compelling thing about a service. Who cares if your home is built using only Stallman-blessed tools, when the walls are full of rats?

#foss #Matrix #OpenSource #rant

🆕 blog! “I'm never going back to Matrix”

I should love Matrix. It is a decentralised, privacy preserving, multi-platform chat tool. Goodbye Slack and your ridiculous free limits. Adiós Discord and your weird gamification. Suck it IRC with your obscure syntax and faint stench of BO. WhatsApp and Telegram can stick their heads in a bucket of lukewarm sick and sing sea …

👀 Read more: https://shkspr.mobi/blog/2025/07/im-never-going-back-to-matrix/

#foss#Matrix#OpenSource #rant

🆕 blog! “I'm never going back to Matrix”

I should love Matrix. It is a decentralised, privacy preserving, multi-platform chat tool. Goodbye Slack and your ridiculous free limits. Adiós Discord and your weird gamification. Suck it IRC with your obscure syntax and faint stench of BO. WhatsApp and Telegram can stick their heads in a bucket of lukewarm sick and sing sea …

👀 Read more: https://shkspr.mobi/blog/2025/07/im-never-going-back-to-matrix/

#foss#Matrix#OpenSource #rant

I'm never going back to Matrix

https://shkspr.mobi/blog/2025/07/im-never-going-back-to-matrix/

I should love Matrix. It is a decentralised, privacy preserving, multi-platform chat tool. Goodbye Slack and your ridiculous free limits. Adiós Discord and your weird gamification. Suck it IRC with your obscure syntax and faint stench of BO. WhatsApp and Telegram can stick their heads in a bucket of lukewarm sick and sing sea shanties! Let's join the future!

The problem is - Matrix is shit. Not just on a protocol level, but on an organisational level as well.

I joined Matrix at FOSDEM - the largest gathering of open source nerds in Europe. We were all encouraged to use it - every talk had its own channel, all the official comms came from there, I was even invited to a top-secret private channel for speaker. This was going to be epic! Viva la rèvölūçïón, right? Wrong.

It was dead. Even among the most seasoned geeks on the planet, most people preferred to use other services like Signal, Telegram, and Slack. Why? Because those other tools actually work.

Matrix has two official Android apps - one of which is old and unsupported, the other is new and doesn't work with many of the basic chat features.

I want to be absolutely clear about this - the company behind Matrix have put out an app which doesn't work with their own product! Lest you think I'm exaggerating, here's a typical view of the official FOSDEM speaker room, using the official Matrix app:

A list of errors saying "Unsupported Event".

It was embarrassing. People would pipe up in channels and say "this doesn't work" only to be told they were using the wrong app and should go back to the one marked unsupported. So they left, never to return. Even in the large talks, where people were encouraged to use the official Matrix chat, most of the conversation happened on other platforms. It was just too hard to use Matrix.

A few thousands geeks, all used to recompiling their own kernels and participating in the Fediverse, and most thought that Matrix was too much of a faff.

After FOSDEM, I kept the Matrix app on my phone. Occasionally receiving a ping from some long-forgotten channel.

And then, one day, I got hit with the most vile spam. A dozen notifications suddenly appeared on my phone with abuse, torture, and transphobic slurs in them.

You can view the screenshot - but, fair warning, it is grim.

This shouldn't be possible. It doesn't take an expensive team of moderators to add some keyword monitoring. It doesn't take a massive AI model to work out that a stranger shouldn't be able to bombard users with multiple notifications. You don't have to sacrifice your dream of a decentralised future - you just need to care about your users.

This stuff is basic.

I moaned about it on Mastdon and was surprised to receive a private reply from the official Matrix account.

Please do not encourage the spammer by giving them a platform and propagating their spam; you may want to consider deleting your post.

This is classic victim blaming. It is my fault for giving the spammer attention. I am the one who needs to take responsibility and delete the evidence. I shouldn't warn people that Matrix is actively dangerous to use.

Bullshit.

Here's what I expected them to say:

"We're sorry you had such a bad experience on Matrix. Rest assured we're working hard to block these spammers - here's a link to show what we're doing. You can protect your account further by doing x, y and z. Once again, sorry and we hope we can win back your trust."

I'm not saying scrappy open source projects have to hire anodyne corporate communications specialists; they just need to have a little empathy.

But, no, just constant whining about how it isn't their fault and how I am the one who needs to change my behaviour.

This is pretty typical behaviour from the team. Find any post complaining about some aspect of Matrix and you'll see their instant woe-is-me replies.

So I deleted the app. I would have liked to have nuked my account but apparently that's not possible.

I'm not the only one who feels like this. Here's an epic post by Marius, which concludes:

Between the slow performance, the increasing amount of spam, the miserable web client, and the unfinished state of Element X, the Matrix.org network is not something I am willing to continue to recommend, especially to non-technical users. Normal people are simply tolerating it to communicate with idealistic nerds like myself who insist(ed) on using it.

Matrix just isn't focussed on users. I'm not talking about user-experience tweaks like which shade of cornflower blue to use - I mean basic user needs like apps that work and a way to combat spam.

There's a long list of ways the protocol contributes to a poor user experience. It almost seems designed without regard for how it will actually be used.

While the protocol may be conceptually interesting and their intentions noble, I'm not prepared to suffer abuse in the name of technical purity.

Open Source and Open Standards nerds like me ought to know by now that the protocol is the least compelling thing about a service. Who cares if your home is built using only Stallman-blessed tools, when the walls are full of rats?

#foss #Matrix #OpenSource #rant