Jons Mostovojs @jonn@social.doma.dev

Linux Is Best @Linux@mk.absturztau.be

@krolden I just wanted to make a message cannot be decrypted joke.

I bet there is a nerdy p2p system which makes messaging parties untraceable by generating a stable load of random traffic and masking encrypted data in it.

And then clients would best-effort decrypt the incoming stream...

Do you know of a thing like this?

**Jons Mostovojs** · Mar 24

Jons Mostovojs boosted

**Linux Is Best** @Linux@mk.absturztau.be · Mar 24

Mar 24

@jonn@social.doma.dev @nixCraft@mastodon.social

I have been making a list of digital service providers outside Us Jurisdiction. Part of that list, includes encrypted messages https://codeberg.org/Linux-Is-Best/Outside_Us_Jurisdiction/src/branch/main/Encrypted_Messages.md

**Jons Mostovojs** · Mar 20

Jons Mostovojs boosted

**Official Kakistocracy Jester 🪓** @OGjester@stranger.social · Mar 20

Mar 20

Official Kakistocracy Jester 🪓 @OGjester@stranger.social

@DemocracyMattersALot HAHAHAHAHAHA!!!! They only made it like 3 days!

A sign that reads, “IT HAS BEEN 0 DAYS SINCE A REPUBLICAN HAS BEEN EXPOSED AS A PEDOPHILE”

**Jons Mostovojs** @jonn@social.doma.dev · Mar 24

**Jons Mostovojs** @jonn@social.doma.dev · Mar 24

Mar 24

@Linux @nixCraft also, remember that m0xie sold out to twitter at some point (admittedly when it was more or less ok).

I think Signal is like Whatsapp in terms of security, which is fine.

I drag all my friends and dates to Signal as an alternative to Whatsapp, but I am not delusional about it being the e2e holy grail!

I think that Matrix has a potential for M̵̱͙͖͐̓̊̋͛̃̒̏̇͆͊̀͐͑͝ͅe̵̡̟̤͔̲͇̖̰̝̟͆̉̈̀̚ṡ̷̡̧̥͔̜͖̜̼̜̺̫̓̾̓̾͒s̵̡̩̺̹̮̲̄̽̓̐̚͜ą̷̧̩̜̓͊̋̄̇̀g̸̨̛͓͙͈̙̪̬̙͕͑͐͆́̓̂̃̓͐̿̚̚̕ͅê̶̛̖̭̩͕̈́̀͛̊̽͐͋͝͠͝ͅ ̷̨̻͇͇͖̘͎̖̱̪̜̳͎̹͓̐̓͒́̄͗̔̓̾͋̉͒̕̚͝c̴̡̣͈̩̲̜̼̦̘̹̮̘̋́̽͗̅̒͗͜ḁ̴͙̼̎̀̓ņ̵͇̆̄̅̿͑̀̉ņ̴̻̰͇͙͎͍̙͕̙̬̾o̴̠̘͈̳͚͍̊̓͑̄̽̅͐̒̑͌͝t̶͔̫̂̆̔͋͌̑̔̊̚͠͠ ̸͎͎̌̐͊b̶̨̡̡̖̟̰̤̻̩͙̬̙̳̏̓̓͑͛̒̓͝e̶͚̯̹͓͓͐͆̐̀̏͆͊̿̕͘͜ ̸̨̨̡͓̯̺͕̼͔͇̱͎̤̼͌́̌͜d̶͈̆̄̈͌͌̉́̓͋̒͐̐͛͆͝ḙ̶̖̗̘̮̃͂̃̾̏̇́̑̐͑̎c̵̨̨̫̦̜̍̏͑͑͂̕ͅͅr̶̢̩̣̱͎̦͓̺̔̇̇̒̄̍́̕͝͝y̵̙͍̘͖̅̄̒͒p̴͎̿̆̓̑̾̚͠͠t̷̢̨̧̟͚͙͉͗͠ȩ̶̛̛͚̩͓̮̫͇͉̰̮̤̞͇̹̽̂̅́̆̏̐̆͛ͅd̷̪̄̿̓̑̔̈́̑̌̄͠

**Jons Mostovojs** · Mar 23

Jons Mostovojs boosted

**HD Moore** @hdm@infosec.exchange · Mar 23

HD Moore @hdm@infosec.exchange

Next.js dropped a CVSS 9.1 authentication bypass vulnerability (CVE-2025-29927) over the weekend. This flaw is trivially exploitable by sending the header `x-middleware-subrequest: true` and causes the request to skip all middleware processing, including any authentication steps.

Shodan reports over 300,000 services with the `X-Powered-By: Next.js` header alone.

You can find links to the advisory and queries for runZero at: https://www.runzero.com/blog/next-js/

How to find Next.js on your network

How to find Next.js on your network

www.runzero.com

**Jons Mostovojs** · Mar 5

Jons Mostovojs boosted

**Information Is Beautiful** @infobeautiful@vis.social · Mar 5

Mar 5

Information Is Beautiful @infobeautiful@vis.social

How rich people avoid paying tax

(Originally by Instgram user @newmoney.blog)

This image appears to be a satirical illustration about how wealthy individuals can minimize their tax burden. It depicts a scenario where a CEO receives $1 million in salary and has $1 million worth of company stock. The illustration shows the CEO borrowing money against the value of their stock, spending the borrowed money as if it were income, and then claiming they have no income for tax purposes. The text suggests this strategy allows the CEO to pay significantly less in taxes.

**Jons Mostovojs** @jonn@social.doma.dev · Mar 23

**Jons Mostovojs** @jonn@social.doma.dev · Mar 23

@amanda you can join mine if you want! it's quite cosy there

**Jons Mostovojs** @jonn@social.doma.dev · Mar 23

**Jons Mostovojs** @jonn@social.doma.dev · Mar 23

@Linux wow, the way you work at meta is the only ethical way to work st meta! Please protect your identity and keep blowing that whistle

**Jons Mostovojs** · Mar 22

Jons Mostovojs boosted

**Linux Is Best** @Linux@mk.absturztau.be · Mar 22

Linux Is Best @Linux@mk.absturztau.be

Earlier, I reminded people that Dot Com, Net, Org, Info, Us, and Edu are all govern by the United States. I also reminded folks that, word-based domain extensions, for example, Dot Social, are managed by Us Corporations. I suggested, it may be a good idea, if you're looking to start a new website, to not only find an overseas web host, but pick a country level domain.

Someone accused this of "Fearmongering".

I come to the Fediverse to enjoy social media, since I spend 8–12 hours working for Meta (Facebook). The Fedi is a good distraction of the nonsense that I see and encounter at work.

For example, the word "protest" is now being monitoring there. We're actively helping a fascist regime track people. That same fascist regime who is threatening Canada, Greenland, and other such nonsense.

I am not Fearmongering. I am sharing events that are unfolding, along with some valued foresight. Things are changing in our world, and not for the better.

**Jons Mostovojs** @jonn@social.doma.dev · Mar 23

**Jons Mostovojs** @jonn@social.doma.dev · Mar 23

#mtg #magicthegathering #linux

The way I give my devices names is this script: https://github.com/cognivore/fortunehost

**Jons Mostovojs** · Mar 23

Jons Mostovojs boosted

Em @Em0nM4stodon@infosec.exchange · Mar 23

Em @Em0nM4stodon@infosec.exchange

Periodic tiny reminder that you do not have to (and actually shouldn't) give your own name to your devices.

Give them their own unique names.

Your privacy will be better for it,
and they'll be happier

#Privacy

**Jons Mostovojs** @jonn@social.doma.dev · Mar 22

**Jons Mostovojs** @jonn@social.doma.dev · Mar 22

@amanda btw, what's your zulip? I use mine as kind of an online orgmode almost because all *my* friends have left

**Jons Mostovojs** @jonn@social.doma.dev · Mar 22

**Jons Mostovojs** @jonn@social.doma.dev · Mar 22

@amanda zulip is better than discord though! It's not even about the UX it's about familiarity of users with simplified, featureless systems.

The core idea of Zulip – streams, topics and *moveable* messages is *hard for modern computer users* to understand and there is no amount of UI polish that will make this friction go away.

There is a potential to convince users that it's the way to converse using UX and gradual onboarding, but I'm not certain.

**Jons Mostovojs** @jonn@social.doma.dev · Mar 22

**Jons Mostovojs** @jonn@social.doma.dev · Mar 22

@virtulis haha, yeah, newlining into() is super silly

**Jons Mostovojs** · Mar 22

Jons Mostovojs boosted

**often frowned upon** @virtulis@loud.computer · Mar 22

often frowned upon @virtulis@loud.computer

@jonn well as you might remember I do have my own style guide (written version extremely out of date, but still) with some specific reasoning behind it, primarily focusing on things being readable at a glance.

So with that mindset if I do manually break an expression into separate lines, it's probably because I believe that is the best level to break it to outline the logic for the next reader.

I might be wrong in a particular instance, but I'm certainly less wrong than "this fits in one line so fuck you it's one line now, except the .into(), that seems important enough to go on the next one".

**Jons Mostovojs** @jonn@social.doma.dev · Mar 22

**Jons Mostovojs** @jonn@social.doma.dev · Mar 22

@virtulis fair, I think I'm blinded by the problems that arise from running big teams, where autoformatters are a way to stop conversations that don't matter.

In my personal life I never felt the need for autoformatters, because "look at this perfectly aligned data in a shape of a table uwu".

But I can imagine your use-cases are somewhere between the two!

**Jons Mostovojs** @jonn@social.doma.dev · Mar 22

**Jons Mostovojs** @jonn@social.doma.dev · Mar 22