cross-posted from: piefed.social/…/piefed-v1-9-is-released-shared-bl…

New features

• Shared blocklists - these are like feeds except instead of listing communities to join it lists people to block. To to Account -> Blocklists to find this feature. Changes by the blocklist author effect all the people who subscribe to the list, causing them to block the list members. They federate, so you can subscribe to blocklists on other instances.
• Edit comments inline, without loading a separate page - wjs018
• Fediverse statistics at piefed.social/statistics
• 2-factor authentication (TOTP) - can be added to your account in the ‘Security’ page in your settings.

For admins

• Auto-ban based on the bans that instances you choose, with keyword matching on the ban reason. Go to /admin/users/auto_ban. Try putting ‘piefed.social’ in as the instance and ‘spam’ as the keyword filter. It’ll cut down on the work involved in running your instance SO much.
• Voting pattern graph on user profiles to help spot automated voting.
• Reset the password of any user.
• Lots of inauthentic behaviour reports for finding bots and serial downvoters, see /admin/votes and PM me for an instructional video. It’s a lot to take in but the video will explain it all.

API

• edit matrix user id when saving user profile data.
• scheduled post endpoints - wjs018

Plus a lot more bits and pieces, browse the list of recent releases in the 1.8.x line at codeberg.org/rimu/pyfedi/releases for details.

To upgrade from 1.8.x or earlier

git pull
git checkout v1.9.x

Then,

./deploy.sh or ./deploy-docker2.sh

Donations

PieFed is free and open-source software while operating without any advertising, monetization, or reliance on venture capital. Your donations are vital in supporting the PieFed development effort, allowing us to expand and enhance PieFed with new features.

Donations can be made via Patreon, Liberapay or Ko-fi.

@fesshole You do realise you don’t need to resort to such subterfuge. I worked with a colleague who would take the sports section of his newspaper, stand up and announce: ‘I’ll be in my office’ as he headed off to the toilet for his customary long break, at the same time every morning.

Durov, of course, denied any issue exists:
https://nitter.catsarch.com/durov/status/2121274027285307903

This fits a pattern with Telegram: when serious issues are raised, Durov denies them and attacks the researchers, while the issues are quietly fixed.

This was the story, for example, with MTproto (the old version of Telegram's protocol). Researchers were attacked by Durov, and then quietly MTproto v2 got rolled out.

Telegram is not trustworthy.

#Telegram #InfoSec

RE: https://helvede.net/@jwcph/117619340623463490

Also, it's worth highlighting that part of the reason this will always feel gross to many of us, even if we can't point to the specific technical aspects of what we're disliking, is nailed by this comment by a random Youtuber:

"AI movie tagline should be: By no one, for no one"

No matter how "good" the tech becomes, at the end of the day it's a thing pretending to be made with intent, but isn't.

It wasn't made by AI, because it wasn't made at all.

#AI

If you use #Telegram or know someone who does – there seems to be a remote code execution vulnerability in Telegram:
https://nitter.catsarch.com/v12sec/status/2120471754166415821

It is apparently being actively exploited.

The vulnerability is *bad*, it can lead to account take over or worse as it apparently provides the attacker with a way to run code directly on the device, outside of the sandbox.

Apparently it has now been patched, so install updates as soon as possible!

It relates to the new "widgets".

#InfoSec

🦀 Lust auf Embedded-Entwicklung mit Rust?

In unserem Workshop lernst du die Grundlagen kennen und setzt dein Wissen direkt in einem eigenen Projekt um. Theorie, Praxis und jede Menge Coding-Spaß!

👉 Jetzt anmelden: https://my.tuxedocomputers.com/event/embedded-rust-mit-embassy-workshop-und-projekttag-28/register

#EmbeddedRust #RustLang #workshop

@heydon You extend your font œvre? Great!

@nellie_m @bobjonkman @dgodon @ascentale @gbargoud @bikenite To be fair, magic and mathematics is sometime difficult to distinguish 😃

As just mentioned at #sfscon BOF here is the survey by @sovtechfund to nominate open protocols like #activitypub as relevant open digital infrastructure.

"Through 30.11.26, we invite the global community of developers and stakeholders to share knowledge of critical technologies.

These projects should be relevant to EU member states + aligned with the #EU #Opensource Strategy.

The results will inform the design of the EU-STF pilot + investment priorities"

👉 https://survey.sovereign.tech/eustf

#fedimedia

Literally nothing is stopping you from creating communities or even an entire instance that follows that principle…

If you want to do it, then do it.

And if people want it, they’ll participate.

But even if they do, I don’t think you’ll get the result you expect and want

The previous two posts (here and here) in this series on algorithmic feeds introduced the built-in criteria judge and external custom judges.

A custom judge is a script run by the Ktistec server that decides whether a post is included in the feed or excluded from the feed based on data about the posts that the server provides in a temporary SQLite database.

There is a lot of data to work with (the owner is you, the feed's creator):

• feed
  One row describing the feed being judged.
  • name : The feed's name.
  • description : The feed's description.
  • params : The feed's parameters.
• stats
  One row. Posts per day over the last 90 days, across the authors the owner follows (confirmed only, not deleted or blocked). Authors who posted nothing in that window are left out.
  • posting_rate_q1 : First quartile.
  • posting_rate_median : The median.
  • posting_rate_q3 : Third quartile.
• authors
  One row per author of any post in posts or referenced. 
  • iri : The author's IRI.
  • type : The actor type.
  • handle : The author's handle.
  • followers : The IRI of the author's followers collection.
  • deleted : Whether the author is deleted.
  • blocked : Whether the author is blocked.
  • followed : Whether the owner follows the author (a confirmed follow).
  • rate_7, rate_30, rate_90 : The author's posts per day over the last 7, 30, and 90 days, counting only posts the server has cached that aren't deleted or blocked.
• posts/referenced
posts holds the posts to judge. referenced holds the posts replied to or quoted, one level deep. Both tables have the same columns.
  • iri : The post's IRI.
  • type : The object type.
  • name : The post's name (title).
  • summary : The post's summary (content warning).
  • content : The post's content as HTML (Markdown is converted).
  • language : The post's language.
  • sensitive : Whether the post is marked sensitive.
  • published : When the post was published.
  • to, cc, audience : The addressing, as arrays of IRIs.
  • attachments : An array of {url, media_type, caption}.
  • in_reply_to : The IRI of the post this one replies to.
  • quote : The IRI of the post this one quotes.
  • thread : The IRI of the thread's root.
  • hashtags, mentions : Arrays of {name, href}.
  • labels : An array of the owner's private labels on the post.
  • author : The author's IRI.
  • deleted : Whether the post is deleted.
  • blocked : Whether the post is blocked.
  • timeline : "create" or "announce" if the post is in the owner's timeline, otherwise NULL.
  • poll : {options, multiple_choice, closed_at}, but only when type is "Question".

This data is used in the example judges shipped with Ktistec.

The polls judge builds a feed consisting of polls. It includes only posts whose type is "Question". It would be very easy to extend this judge to filter on single-choice vs. multi-choice or on polls about specific topics.

The quiet_posters judge is a little more complex. The server provides statistics on all of the actors you follow, as well as the author's posts per day over the last 7, 30, and 90 days. A post is included only if you follow its author and that author's 90-day posting rate is at or below the median, so the quieter half of your follows aren't drowned out by the noisier ones.

As you might imagine, there's a lot of value in judges built around statistics, social signals, and interactions. This is the area where I'm now putting most of my effort.

#ktistec #AlgorithmicFeed #ActivityPub #fediverse

@bjoern
Naja, was bei threema besser gelöst ist ist die ui bzw. usability. Der Einstieg ist einfacher. Aber ja, ich versuch die Leute eher auf Matrix zu bekommen...

They should employ a couple of healthy people to sit in beds in a ward, all these sick people defo brings the vibe down.

15-11-2026 Inside out: Blood has two ancient Indo-European roots: h₁ésh₂r̥, meaning blood within the body, gave rise to the Latin word sanguis. The second root, kréwh₂s, referred to blood spilled from a wound. It became associated with ideas of rawness and brutality, English words such as raw, crude and cruel. It evolved into Balto-Slavic krū́ˀs, later Russian кровь (krovʹ) or Czech krev.

https://mapologies.com/animal-products/#Blood

#30DayMapChallenge #map #geography #language #fruit #botany #plants #etymology

Testing support for French in my new font project. Check out the “œ” ☺️

@JohannesStarke If you have any questions we are happy to answer them.😊

@jiji for some of my earliest jobs I did a rough estimate but it doesn't matter much because the numbers are so low there