Show more

I'm > < so close to just setting up a http reverse proxy in front of this API since I can't convince this ruby client to ignore certificate validation errors when talking to an endpoint with a self-signed cert.

Da der Betrieb der Onleihe (über die unsere Stadtbibiliothek digitale Medien zur Verfügung stellt) in letzter Zeit eine komplette Katastrophe ist, sucht meine Lebensgefährtin nach Alternativen, insbesondere was Hörbücher angeht. Klar, dass das anderswo nicht zu dem geringen Preis (Mitgliedschaft bei der Stadtbibliothek) geht.

Was gibt's für Hörbücher an Alternativen, wenn das ganze unter iOS funktioneren soll, möglichst mit herunterladbaren Medien (für wenn kein Netz)? ...Spotify? Und sonst?

So, for the #RetroSunday. What do you prefer if you are running FreeMiNT on your #Atari ...

Turns out you can fix problems by going back in time: Downgraded vagrant to 2.0.4, and things fall into place, even using the ancient ruby version shipped by Debian.

Show thread

Oh hey, I learned right now that DuckDuckGo has built-in URL decoding...

Doesn't really look like something targeted at Postgres though - xp_cmdshell hints towards Microsoft SQL? Why would anyone stick that cruft onto requests towards a random Mastodon instance? But then why /etc/passwd? Hoping for someone running MSSQL on Linux?

Show thread

Ok, looking back through the log for that IP address, this seems like a more serious attempt:

GET /interact/102951158023860465?type=reply&lBUI%3D7191%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23

Show thread

Seems I'm always looking at my Mastodon log files at the wrong time...

Wondering WTF the system doing this kind of request is trying to achieve... That looks a little like kind of an SQL injection attempt - but not really...? Maybe just a system that's confused and constructs bogus requests.

"thoughtful engineering" would be good. nice expression

@galaxis from the joinmastodon docs, cos I'm right now confused by the descriptive text in my client also:

"Filters normally apply to any status that contains the included characters, regardless of whether they are in the middle of a word. Enabling “whole word” will only apply the filter if the keyword is surrounded by spaces or other non-alphanumeric characters."


On that note... Are filters being processes client-side? Because it turns out I see posts that are showing as "filtered" in the Mastodon web UI in my home timeline on ?

Show thread

Sometimes I'd really wish to know what the "Whole word" toggle on filter terms actually does. I just can't parse the description text "When the keyword or phrase is alphanumeric only, it will only be applied if it matches the whole word" into something useful. Is the filter a substring search otherwise that doesn't care for word boundaries? Or whatever?

Somehow this was way easier to understand when filter strings were simple regexes.

"The things that I do ... I watch a lot of ... films, and I eat a lot of food ... and I sit in the dark, you know, and I'd do that kind of stuff [..] But that's not what I like to do, you know, it's just what I do..."

Aldous Harding being interviewed by Cheryl Waters in between songs in this KEXP video:

So relateable *sigh*

But also she seems kinda subdued in this recording, with an unusally controlled face compared to other videos I've seen...

Brought the ol' Atari TT030 back up after a long time away. Building Bash 5.0 finally after an initial snafu. The configure script took about 9 hours...

@cypnk Modernism was a school of art pretentious enough to think time would not march forward, confusingly rendering the name “modernism” into ‘something from the past.’ Post modernism came after modernism, recognizing the flawed name and making a clumsy fix.

See also futurism, a school of art over 100 years in the opposite direction of ‘the future.’


Some songs on last year's debut album of Nilüfer Yanya remind me so much of Sylvan Esso. The way she uses her voice sounds very similar to Amelia Meath to me.

Great... Tonight I'm prepared to track down what this nonsense is all about, but now the interface configuration looks perfectly normal. Just one temporary address assigned.

The only thing I noticed was that after the reboot the wifi interface had one IPv6 address lingering from before (different prefix - I have the DSL router disconnect each night to get new public addresses).

Maybe I should just hook in a small script that does a forced ipconfig /release and ipconfig /release6 on reboot.

Show thread
Show more
INFRa Mastodon

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!