mastodon 4.7.3Admin/owner of this Mastodon server. I play around with Linux.
I also own:
Phanpy: https://phanpy.hear-me.social
Peertube: https://my-sunshine.video
Pixelfed: https://gr8.pics
Piefed: https://feddit.online
XMPP (Jabber): https://between-us.online
Matrix: https://secure-channel.net
Bluesky PDS: https://blue-ocean.social
Mobilizon: https://my-group.events
Samsung pushed an update to their "smart" refrigerators
"... users ... on Samsung’s Korea Community forum report that their fridges completely stopped working, resulting in spoiled food. Other issues include the automatic door-opening function not working and the fridge’s internal lights not turning on."
Websites you should never visit because they are published by a conglomerate that creates the magazines using AI and nothing but AI.
I used to visit Space Daily every so often, but those days are now surely gone. I never heard of the others. It's quite a large list.
https://futurism.com/artificial-intelligence/every-brown-brothers-media-publication
The reason your face looks wrong in photos. It's not you; it's mostly physics and some psychology.
https://www.popsci.com/science/why-look-different-in-mirror-photos/
Did you know (few people do) that there is a Federated, decentralized, ethical alternative to #FacebookEvents and #Meetup for event-planning and group-management? Any alternative to Facebook is great, right?
It's called #Mobilizon. It's developed by the French non-profit organization Framasoft, which is the same group behind #Peertube.
Why Mobilizon stands out:
It's Federated and Decentralized: It's made up of a network of independent websites that communicate with each other via ActivityPub, just like Mastodon, Pixelfed, PieFed, Peertube, etc.
There are no Ads or trackers.
Each instance is volunteer run.
It federates will ActivityPub applications, like Mastodon!
If interested in exploring Mobilizon, in addition to running this Mastodon server, and other decentralized applications, I run the Mobilizon server, https://my-group.events
Important reminder, if you own a domain name and don't use it for sending email.
There is nothing to stop scammers from sending email claiming to be coming from your domain. And the older it gets, the more valuable it is for spoofing. It could eventually damage your domain's reputation and maybe get it blacklisted, unless you take the steps to notify email servers that any email received claiming to come from your domain should be trashed.
Just add these two TXT records to the DNS for your domain:
TXT v=spf1 -all
TXT v=DMARC1; p=reject;
The first says there is not a single SMTP server on earth authorized to send email on behalf of your domain. The second says that any email that says otherwise should be trashed.
If you do use your domain for sending email, be sure to add 3 records:
SPF record to indicate which SMTP server(s) are allowed to send your email.
DKIM records to add a digital signature to emails, allowing the receiving server to verify the sender and ensure message integrity.
DMARC record that tells the receiving email server how to handle email that fails either check.
You cannot stop scammers from sending email claiming to be from your domain, any more than you can prevent people from using your home address as a return address on a mailed letter. But, you can protect both your domain and intended scam victims by adding appropriate DNS records.
UPDATE: The spf and the dmarc records need to be appropriately named. The spf record should be named "@", and the dmarc record name should be "_dmarc".
Here's what I have for one domain.
One difference that I have is that I'm requesting that email providers email me a weekly aggregated report when they encounter a spoof. gmail and Microsoft send them, but most providers won't, but since most email goes to Gmail, it's enlightening when they come.
#cybersecurity #email #DomainSpoofing #EmailSecurity #phishing
20% lower online prices if you use a local library computer? Another reason to hate retailers.
"Lora Kelley took a trip to the New York Public Library for us and compared prices against a personal iPhone. The results? A box of Apple Cinnamon Cheerios and a pack of toilet paper were nearly 20% cheaper on the library desktop."
On what planet would people not bother setting a simple switch to tell email servers to discard email claiming to be from their domains but aren't? You know to protect unsuspecting victims, protect the reputation of their domains, and prevent their domains from being shut down permanently for spam?
Apparently Earth.
People who leave the default option as it being OK to deliver spoofed email from their domain even if the email is screaming that it's a spoof, well, you know, deserve to lose their domain names, IMHO. What do you think?
https://ciphercue.com/blog/dmarc-enforcement-gap-rua-fragmentation-2026
I thought #Proton abandoned Mastodon. There was a big hoopla about it at the time on the Fediverse.
Then what is @protonprivacy@mastodon.social ?
I know Proton doesn't list this Mastodon account on their website, but it seems official and active, having just posted something 23 hours ago.
Just about the entire internet uses certificate authorities to establish trust. Here, a simple old-school social engineering trick broke this trust and allowed hackers to get signed certificates from DigiCert for their malware.
There is a better way to establish certificate trust that doesn't rely on a 3rd party, and it's free too. It's called DANE, which binds the trust directly to the Domain Name System by using DNSSEC. DANE is ideal for code signing certificates (and other uses), but is overlooked.
This attack is virtually impossible under DANE. A vulnerable support person is of no use. Hackers would need to directly compromise the target's DNS infrastructure, the registrar, and the top-level domain authority. All three. Nearly impossible compared to just finding some dupe at the CA in a public chat room.
https://hackread.com/hackers-digicert-issue-certificates-sign-malware/
For those who care, following yesterday's blowback on the sudden new rate limits imposed on #Gemini, Google has permanently reset the weekly quota for all paid plans and tripled the usage boundaries.
For those who don't care or who are upset about any #AI news, please don't AT me.
https://www.androidheadlines.com/2026/05/google-triples-gemini-paid-plans-usage-limits.html
I never use the application names in any of my servers because I'm always worried about future trademark enforcement.
The Mastodon organization guidelines at https://joinmastodon.org/trademark say:
Do not use or register, in whole or in part, the Mastodon marks as part of your own or any other trademark, service mark, domain name, company name, trade name, product name, or service name.
When I search the database here for instances known to this server that contain "mastodon" in their domain names, I see over 1,800 server names. And it's unknown if they would consider "mstdn" to be a violation as well.
I wonder how far they will push this enforcement. A Mastodon server cannot change its domain name.
Star Trek fans! :trekbadgetng:
7 of 9 (Jeri Ryan) has turned on Threads Federation and can now be followed on the Fediverse!
She once had an active Mastodon account but hasn't posted anything since last September. But, she's a prolific poster on #threads at @jerilryan@threads.net
Her inactive Mastodon account is @JeriLRyan@mastodon.world
#startrek #7of9 #SevenofNine @georgetakei@universeodon.com @GoodAaron@mastodon.social
Seems like a good idea for #Bitwarden users to jump ship now.
https://www.osnews.com/story/145029/get-your-passwords-out-of-bitwarden-while-you-still-can/
#Letsencrypt is not living up to their name at the moment.
It seems the disruption in generating certificates is deliberate, related to some event:
May 8, 2026 18:37 UTC
INVESTIGATING
We have been made aware of a potential incident and are shutting down all issuance.
@ProtonDrive@mastodon.social Are there any special considerations using PQE with the email bridge?
This! This! So perfectly stated and well-written.
Beyond technical features: why we need to talk about the values of the Fediverse (part 1).
As users of the Fediverse, I think we'll all relate and understand.
I am plagued by the problem described in this post.
My #Samsung monitor often goes black, sometimes just from standing from my office chair, not even touching anything. And when I stand, I'm always suddenly electrified and will give off a shock when I touch something grounded. If the Samsung monitor is near the shock event, it will go black.
I often need to disconnect and reconnect the monitor from the video port to get it back, but sometimes it won't, and I need to reboot.
I also have a #Dell monitor next to the Samsung, which has never been affected.
Does anyone else deal with this shocking situation?
BTW, this post blames it on the gas canister in the office chair giving off an EMI spike when I stand.
It's a legal conundrum
More U.S. troops have died amid Iran war than Pentagon has disclosed publicly
https://gr8.pics was updated the same morning this update came out.
