> Such ability to execute remote code from extension's own context is how Hover Zoom and SpeakIt! were found to track and data mine users, see:
@andreas The issue author verified that Firefox is not affected by the vulnerability. One more reason to switch.
All Chrome extensions can execute remote code in their own context:
Included in the bug report is a proof-of-concept web extension by gorhill, author of uBlock Origin.
TIL about "Git conditional includes" . You can setup specific Git configs based on your filesystem location. Here's an example:
path = .gitconfig-personal
path = .gitconfig-work
email = Your default email
email = Your personal email
email = Your work email
Hey-o! Just want to say if you're enjoying our Mastodon server, our Matrix chat, or anything else we're doing @ privacytools.io, I would really appreciate it if you'd consider donating any amount towards our costs 😄
We're currently spending around $60/month on servers and other infrastructure, and we'd like to be able to pay our team more in the future! We prefer https://liberapay.com/privacytools.io/ but there are many other contribution methods at https://www.privacytools.io/donate/ 😅 Thanks everyone!!
Autistic student graduation video that's going around
Not that an autistic student graduated, but that it took *one minute* of time for the allistic principal to tell the NT students and crowd, "Hey, here's how we can support this person so that we're giving them an equal experience," and everyone just DID IT.
Nobody was a dick about it. No one complained about "snowflakes" or any other bullshit. It was just, "Oh, ok, that's easy, np."
What's inspiring about it is how *easy* it is to be good.
a take on deplatforming nazis
We now have a #Glimpse project code of conduct!
The community determined it should be based on the Contributor Covenant, and that it should be added to and amended over time as the need arises. If you have any further ideas or feedback, let us know.
(As previously stated we are still working on the website, so expect the theme and layout to change in the near future)
Hmm very cool. TIL:
“IP addresses can be shortened by dropping the zeroes.
- http://22.214.171.124 → http://1.1
- http://192.168.0.1 → http://192.168.1”
We trust you have received the usual lecture from your local System Administrator. It usually boils down to these three things:
#1) Women, especially women of color and trans women, built the foundations of most of your digital life.
#2) Before you try to help someone with a problem, make sure they actually asked for your assistance.
#3) Others' needs are more important than your convenience.
The last bit of software I made was a Firefox extension to bypass Twitter's t-dot-co click wrapper. https://www.toomanybees.com/fuck-t-co
It is extremely not useful and it took me a while to figure out why I bothered to make it (let alone publish it so it could be installed).
I desperately want to be a part of the exodus from for-profit social media, but I know that I don't have the initiative or confidence to work in a cooperative. So I decided to be a lone saboteur instead. 💣
"But people shouldn't just do things because they're told to, but because they understand why they're doing them."
Look if someone says you're standing on their foot do you step back or start to ask them about their experience with the pain?
If you're undecided about whether the oppressed or oppressor is right... why not just side with the oppressed? Literally worst case, they're wrong and so your actions are useless in fighting oppression. What's the worst case of supporting oppression?
What good is a law "protecting" against discrimination/abuse if the ones discriminated against/abused can't afford to take time off work to take their bosses/landlords to court?
The fact that trans people aren't protected from job/housing discrimination under law in most states is only half the equation. Even if we somehow ended up with federal protection, we'd still be suffering simply due to making so little that even a day off work means we lose everything.
@emsenn Thanks for the reads. What's most telling to me is how the CoC is changing rather than using it as, say, passing under the very low bar of using the incident as a mere exercise of enforcement ("Here's what the punishment would be if I weren't an admin").
It's super telling what kind of community FOSStodon wants to be, how new and inexperienced the admins are. Being great at tech connecting people doesn't equal being great at running a community of connected people.