Kris Nóva @nova@hachyderm.io

Good morning.

Yep.

Omg @quintessence said we could stay up late past bedtime and watch detective pikachu! Yes!

Tomorrow morning (9:45am Pacific) will be my session with
@devopsdays_kyiv
. If you have been waiting for an excuse to come check out my twitch stream now is the time.

Live tomorrow morning. All proceeds going to #StandWithUkraine

https://devopsdays.com.ua/donations

Good morning. Here is our #hachyderm infrastructure update

It’s “legacy” birdhouse game. 🐾

Blocked by the DoD. How is your Tuesday going?

For all the #archlinux #linux #security friends out there in the tooterverse you can now install xpid directly in archlinux using yay (or similar)

https://aur.archlinux.org/packages/xpid

You can then use it to find:

- ebpf programs
- hidden pids
- containers
- more

When you are ripping container pids apart at runtime and pushing the limits of the Go programming language. 😅

@ellie

There it is. Easy peazy. Lemon squeezy.

Make sure you follow good privacy practices folks.

🐘 💨

It is possible to connect to the database as a Mastodon admin (owner of the instance) and query for specific records/DMs.

su - 'postgres' -s /bin/sh -c 'psql'

\c mastodon_production

select text from statuses order by id desc;

h/t @ellie

https://ellieayla.net/@ellie/108216109571474362

So Mastodon does NOT encrypt DMs.

I was able to trace a string directly from a DM into a the postgres database. There is no encryption at rest. Nor is there end to end encryption. (Yet!)

Here is a photograph of a DM with the string "N0VAn0vaN0VA"

Storage update for hachyderm.io

Additionally my relationship with Twitter makes a lot of sense now. If their privacy and moderation controls work at all like the ones on Mastodon, I can see exactly how my account was flagged, and why nobody is doing anything about it.

Moderators can literally see all your posts and filter them. We can also gather notes, flag accounts, and look up other accounts based on email domain, IP address, etc

Will be working on a privacy policy for the service soon. It is important to me to be as transparent as possible with folks using Mastodon. To be clear I very much *CAN* see you public IP address, the email you register with, and filter the data to find out similar accounts for moderation purposes.

Here is what I can see for every client on hachyderm.io

Pleased to announce that the official hachyderm.io instance now has support for images and media uploads. We currently have 2tb of storage set aside on a ZFS file system for all of our data. I’ll continue to admin the system, blog about it, and come up with a compelling open source privacy policy for us. In the mean time - please send cat/dog pics!