Notices by clacke (clacke@social.heldscal.la), page 37

And here we are, I have another #Mastodon announcement to make. I guess my last...

I’m sorry.

I’m sorry that I deceived you, but I didn’t know it at the time.

Due to a misunderstanding, somewhere along the way, the one month contract was just that, one month only. I had interpreted it as “I’m not sure if I can make a new contract with the same terms, because there’s not enough money right now, but let’s start with one month and take it from there.”

I don't get it... this #efail / #gpg / #pgp / #smime thing is all over German media (e.g. here: http://www.tagesschau.de/inland/e-mail-verschluesselung-101.html) even though it is totally irrelevant for 99% of people, as almost no one is using PGP encryption for his/her mails anyways and the few that do will most likely have disabled HTML emails (or at least loading of remote content).

It would be much more proportional to write a *shocker* article every single day about how almost all emails are sent with no e2e encryption at all.

REQUIREMENTS for Fediverse to grow:

- single static binary letting non-techies run instances of mastodon, matrix and others
- access and synchronisation via TOR

why one binary: non techies are not in the position to setujp servers. they will always overload public servers. with a single binary they can run it on their pc or mobile device.

why Tor: Tor is able to offer hidden services, so even a mobile phone can server public services using the youraddy.oonion address. not working with IP only

⚠ The security vulnerability on discovered in rc1 and rc2 have been patched, in verson 2.4.0rc3 ⚠ UPDATE ASAP

⚠ If you've run 2.3.3+master you may be affected too (since the 27th of march)

⭐ 2.3.3 and other previous stable versions are SAFE, and not affected by it.

https://github.com/tootsuite/mastodon/releases/tag/v2.4.0rc3

#Mastodon #SecurityVuln

(updated toot with additional info, read full info inside the release on github)

PGP isn't safe they said. Use Signal they said. https://ivan.barreraoro.com.ar/signal-desktop-html-tag-injection-variant-2/