hey all, there's a rash of http2 vulnerabilities going around c/o Netflix today.
the default mastodon nginx config has http2 enabled, and nginx is affected (in one form or another) by three of these attacks, so you should upgrade nginx as soon as possible:
i just backed EXTREME MEATPUNKS FOREVER: BOUND BY ASH on KICKSTARTER and YOU SHOULD TOO https://www.kickstarter.com/projects/hthrflwrs/extreme-meatpunks-forever-bound-by-ash
my dad's been cycling more as an effort to get more exercise and he recently bought a trainer for it, so like
you prop up your front wheel on something, you take the back wheel completely off and replace it with the trainer. the whole bike now stands up even when it's not moving, and if you pedal it just turns a sensor on the side. but it connects to your computer so you can get stats about the good biking you're doing
and i just saw my dad using this program with a fully rendered 3d world and an avatar on a bike that was copying him, surrounded by stats about his real-world biking. i thought that was kinda neat but i was gonna kinda tease him about it until i saw other bikers on the road, and my dad said "yeah those are other real people using the program"
in fact, he went on to say "the mechanic is disabled right now because i'm in training mode, but otherwise, if i was right behind another person the trainer would lower the resistance a bit to simulate drafting", which is cool anyway but when i asked about "outside of training mode" he also clarified "yeah you can sign up for races and stuff, and it'll put you in different tiers based on your training performance".
it turns out that in addition to like, actually training and exercising and getting better at cycling, he's gaining exp and leveling up, and he's earning in-game currency to spend on new clothes for his avatar
my dad plays a cycling MMO where the controller is a real bicycle
Sometimes I feel like a parent in a toy store:
Me: Put the logo back. I don't care if you like this logo, we already have one at home. You got logo redesign money???
@nightpool "*CSB animation voice* Despite safety protocols suggesting generated passphrases for all databases regardless of use, the test database, initially filled with bogus data, was created with a simple single-word password.
As the test database was used for more purposes, the company failed to complete any re-evaluations of the access mechanisms required to bring them in line with the safety protocols applying to the new uses.
An actor can allow another actor to tell them what to become, but only if they consensually pass the authority to do that to the other actor. I suspect that'll be rare.
I see. And what now?
Cybrespace is an instance of Mastodon, a social network based on open web protocols and free, open-source software. It is decentralized like e-mail.