Notices by made out of flesh or wood (nightpool@cybre.space), page 6

@onethousandtwentyfour pretttty sure Mastodon handles this correctly? and certainly the rdf based servers like Kroeg handle it correctly

(not that servers, technically speaking, should be discarding anything)

((now most people would probably discard the resource for having a tag URI but that's a separate discussion. having a dereferencable URI is required by spec))

@onethousandtwentyfour well, people complaining about things they don't understand instead of trying to understand them is unfortunately a universal constant

@onethousandtwentyfour I guess I'm not following exactly, since I help people understand AP a lot and aside from extensions and context vs namespace (a confusion that I can kind of rest on JSON-LD's shoulders partly), I don't see people struggling much with things that would be made clearer with a more fundamental grounding in RDF

@onethousandtwentyfour sorry yes we're in agreement on the first bit. AS2 and AP are both stronger for being based on json ld

@onethousandtwentyfour this just kind of feels like the AP equivalent of "read more theory" leftism

@onethousandtwentyfour to what end is this particularly useful knowledge when hacking on ActivityPub?

@jaywink @gargron yep, that sounds like mastodon doesn't think your test account is following the diaspodon.fr account

@jaywink @gargron what instance were you deleting from? mastodon sends deletes to all known inboxes last I checked

@rosen pokéwifi is when your router is a drifloon

@cwebber thanks :) we can say good things and be precise about them

@cwebber right, but I also wanted to clear up that that wasn't what the article was saying. it calls out u2f specifically, but it's not saying it can be mitm'd, it's saying that with a compromised server, authentication *doesn't matter*. (or something, it's a little handwavy on the details)

anyway your follow-up specifically implies u2f can be mitm'd which just feels like it's going to be a little misleading for people to stumble upon

@cwebber that's 1) not what this article was saying and 2) only otp and sms are vulnerable to mitm? there are other types of 2nd factors that aren't

@Canageek @chr have you seen this personally?

@lifning @Skirmisher @chr eek! I'll take a look after work today

@zge doesn't java have this

@zge didn't uhhhhhhh moldbugs language have this

@zge didn't uhhhhhhh modbugs language have this

(if i was thinking ahead, i would have done something more subtle, but I was on my phone and forgot to check if we had legit accounts federated from that instance)

I've unblocked social.xeltica.work now! Sorry for the inconvenience—if you were following any user there from cybre.space, you'll have to re-follow.

(I would have silenced, but i'm not sure that silence correctly blocks follows / follow-requests)