Notices by Christine Lemmer-Webber (cwebber@octodon.social), page 18

@nolan AMP's rewriting of stuff to be hosted by Google specifically in a way that increases their surveillance, with *pressure* to do so in exchange for a boost in traffic that will absolutely go away anyway once they've forced the entire ecosystem to move over to it, is a sure sign of monopolistic behavior that Google deserves to get hit with an antitrust lawsuit for more than anything else I've seen so far.

AWS role-based (ACL-like) permissions still fucked, now responsible for bank losses https://blog.cloudsploit.com/a-technical-analysis-of-the-capital-one-hack-a9b43d7c8aea

can you guess what I'm going to say

come on you already know

we need ocaps

The Godot showreel is nice https://godotengine.org/article/godot-2019-showreel

But I wonder, is there a list of FOSS games being made with Godot? That's what I really want to see.

And that's it... we have 40 attendees! ActivityPub Conf 2019 registration is closed! https://dustycloud.org/blog/activitypub-conf-2019/

Looks like a great group; see all you who registered there!

I just added what I think is the coolest part to OcapPub... the "Composition" section! This especially shows off how cool ocap design is: Alyssa schedules a backup of her file to run twice a day, and yet the job scheduler which runs the backup has neither access to read the file nor write anything else to the backup service! https://gitlab.com/spritely/ocappub/blob/master/README.org

More on datashards: https://github.com/WebOfTrustInfo/rwot9-prague/blob/master/topics-and-advance-readings/datashards-rationale.md

More on the immutable datashards layer (needs to be updated, under its former name "Magenc"): https://gitlab.com/dustyweb/magenc/blob/master/magenc/scribblings/intro.org

More on the mutable datshards layer (under its former name "Crystal"): https://gitlab.com/spritely/crystal/blob/master/crystal/scribblings/intro.org

So a while ago I showed with Golem how Datashards (previously Magenc/Crystal) could be used so that "content could survive nodes going down". https://gitlab.com/spritely/golem/blob/master/README.org

I'm realizing that what the more interesting demo would be to show, now that we have "mutable datashards" URIs, how you can make a user profile that can also survive if a server goes down. You just point your datashards URI to a new inbox on a different server and push that update to the network!

Oh it's officially released now? Heck yeah, Blender 2.80! https://www.blender.org/download/releases/2-80/

An actor can allow another actor to tell them what to become, but only if they consensually pass the authority to do that to the other actor. I suspect that'll be rare.

ActivityPub Conf talk submission deadline is today! https://dustycloud.org/blog/activitypub-conf-2019/

However, if you need a pseudo-extension, you can submit just your talk title today and submit your talk summary paragraph on Wednesday.

Hey! The scanner and Wacom tablet both work on this machine. I wonder what changed?

Anyway, here's a piece of micro-artwork to celebrate.

ActivityPub Conf's organization has happened from extremely limited resources, but I think at this point I think it's going to be amazing. Looking at the list of people registered and talks already submitted gives me confidence that this is going to be a heck of an event.

There's still slots open if you were thinking about registering, and talk proposals are still open until Monday! https://dustycloud.org/blog/activitypub-conf-2019/

Announcing ActivityPub Conf 2019! September 7th & 8th in Prague, immediately following Rebooting Web of Trust. https://dustycloud.org/blog/activitypub-conf-2019/

Space is limited, see post for details. We are also soliciting talks.

Hope to see you there!

Back up and writing again. Wrote "Extending the car key metaphor" section https://gitlab.com/spritely/ocappub/blob/master/README.org

@arunisaac Yep, people have been doing that for some time! Many mail servers even support this out of the box.

You can also read up on Petmail which has similar ideas to what I am describing http://petmail.lothar.com/design.html

Books in the Oxford Very Short Introduction series I have read / am reading so far:
- Sexual Selection (done)
- History of the Jewish People (done)
- Zionism (almost done)
- Utilitarianism (started)

Queued up for next are:
- Economics
- Islamic History
- Literary Theory
- Statistics
- Artificial Intelligence
- The Roman Empire

It would be better if the internet were modeled off of something like Tor .onion services, where you *know* you have a secure path, because the address is literally the fingerprint of the server. "But how can I make sense of which site is which?" You guessed it, petnames https://github.com/cwebber/rebooting-the-web-of-trust-spring2018/blob/petnames/draft-documents/making-dids-invisible-with-petnames.md

And, bookmarks *are* petnames, with a minor UI tweak https://www.w3.org/2005/Security/usability-ws/papers/02-hp-petname/

The DNS + SSL CA model puts users at risk. I hope we can move past it.

So the government of Kazakhstan is MITM'ing all SSL'ed traffic https://lobste.rs/s/uqj8nq/mitm_on_all_https_traffic_kazakhstan#c_0boxyk

The way they are doing this is by adding a Certificate Authority (CA) that allows them to snoop all traffic.

This is, by the way, why SSL is criticized as being "only as secure as the weakest CA in your system". Here it's deliberate, but that's a problem in general.

I've finished writing part 1 of "OcapPub: Towards networks of consent", which is to say the "Conceptual Overview" section https://gitlab.com/spritely/ocappub/blob/master/README.org

There's a lot there already, and we haven't even gotten to Part 2, the "How to Build It" section yet. I'll begin work on that tomorrow.

What's here already is more or less an explanation of *why* OcapPub is taking the particular direction it is taking, and why other approaches run into serious problems.