🔐 Direktnachrichten sind jetzt verschlüsselt gespeichert

Alle Direktnachrichten auf bizzfed.de liegen seit dem 14. November verschlüsselt in der Datenbank (AES-256-GCM), auch die bereits vorhandenen. Der Schlüssel liegt getrennt von der Datenbank und ist nicht Teil der Backups.

Was das bringt: Wer einen Datenbank-Dump oder ein Backup in die Hände bekäme, sieht nur Chiffretext.

Was es nicht ist: Keine Ende-zu-Ende-Verschlüsselung. Der Server ver- und entschlüsselt Nachrichten selbst, deshalb kann der Betreiber sie technisch weiterhin lesen. Schreibst du jemandem auf einer anderen Instanz, verlässt die Nachricht BizzFed per ActivityPub und wird dort nach den Regeln der Instanz gespeichert.

Backups von vor der Umstellung enthalten die Nachrichten noch im Klartext und werden spätestens nach 30 Tagen gelöscht.

Für dich ändert sich nichts. Alles funktioniert wie bisher, auch in Mastodon-Apps und im Datenexport.

Selbst hosten? Die Verschlüsselung ist optional und in der INSTALL.md beschrieben. Genaueres steht in unserer Datenschutzerklärung: https://bizzfed.de/datenschutz

#BizzFed #Datenschutz #Sicherheit

Marcin Wichary @mwichary shared links to the interface guidelines and style guides of some historical GUI frameworks such as GEM, OLPC, and Windows Phone 7.

https://unsung.aresluna.org/a-few-more-style-guides

#gui #retrocomputing

@drq жду боя между постсоветской плесенью и британской

Friends, it looks like someone is trying to impersonate me on the Fedi --- I can't see any content they've posted, but they're using my display name.

Please block/report that account if you see it.

Dansup does rely on LLMs, so it wouldn’t surprise me.

This blog post reads like AI slop.

@neatnik Is there a way to set a flag/cookie so that it doesn't count my own visits?

A morning filled with the smoke of fires. 🔥🔥
A truly harsh morning. 😔
A morning that speaks of our pain.
A morning that says: "This is Gaza, and these are its brutal conditions.
" We have run out of cooking gas.
A single kilogram of gas now costs 35 dollars. Please, do not leave me to bear all this burden alone.
You are my lifeline.
Without you, I would not be able to endure or keep going.
https://chuffed.org/project/161617
#MutualAid
#FediForGaza
@kotaro
@bifouba
@matus_chochlik

www.biorxiv.org/content/…/2026.11.06.764567v1

(Found with Aftergleam, a private reader for new research papers.)

Decentralized social media for environmental research

A. Chai-allah, A. Ghermandi, N. Fox, D. Van Berkel bioRxiv · 10.64898/2026.11.06.764567v1 · ecology · submitted 2026-11-12

Abstract

Social media data are reshaping environmental research. However, recent ownership and policy changes on centralized platforms like Twitter/X have motivated many users to seek new alternatives while simultaneously accelerating data restrictions for scientists. Decentralized social media, particularly Bluesky and Mastodon, are emerging as alternatives for users seeking greater control over their data and as a more stable and sustainable source of data for researchers. This rise may be instrumental in revitalizing the role of social media in environmental research. This study aims to provide a first-of-its-kind analysis of the potential of these new sources for environmental research, demonstrating their potential usefulness through the examples of climate change discourses and people’s appreciation of wildlife. We find an increased adoption of Mastodon and Bluesky, with high linguistic diversity, even if dominated by English. Wildlife image content reveals broad taxonomic diversity, with plants, birds, and insects dominating the records. We find this pattern broadly consistent with that observed on the popular citizen science platform iNaturalist. Climate change discourse is found to broadly reflect the scientific consensus on both platforms, with contrarian claims remaining uncommon. This suggests that researchers may benefit from less polarized opinions and misinformation, arising from interactions that are less driven by engagement maximizing algorithms implemented in other platforms. Our study illustrates the promise of decentralized social media as a new data source for environmental scientists and paves the way for their broader use in environmental research.

Van de zomer hebben we (@danalinssen @wsslmn @ShadowJonathan en ik) cultuur.social gelanceerd vanuit de #SvdJ om te kijken of we voor @theaterkrant en @filmkrant een bruisende plek zouden kunnen creëeren op de Fediverse onder de noemer #Feditorial

Afgelopen week en komende week nemen we ook #idfa #doclab hierin mee.

Kijk ook eens in de timeline van Cultuur.scoial en volg eens wat mensen: https://mastodon.cultuur.social/public/local

@EUCommission Can we just join the EU already?

Hier ga ik natuurlijk straks even kijken. Wie nog meer? #Feditorial #Fediverse #ActivityPub 13:00 – 13:50 Open Feditorial – Hosted by Dana Linssen, Joost Broeren-Huitenga and Kees Driessen. @dana @KEES114

What is the session about?
“How do we foster critical reflection for immersive experiences and emerging artforms we don’t yet know how to define? How do we do independent cultural journalism without locking ourselves and our audiences in big tech platforms?”

The Open Feditorial takes the form of an open editorial meeting about festival coverage and art journalism in the digital and physical space. It will be a dialogue to find a common ground of inspiration and interest where anyone can join in the conversation about digital autonomy and the possibilities of the Feditorial concept for art journalism.

Participants are invited to take part in the thought process and conversations around subscriptions to Mastodon servers, and are invited to explore and subscribe to mastodon.cultuur.social. It would be useful to bring your own laptop.

About the hosts:
Dutch Film and XR Critics Dana Linssen (NRC), Joost Broeren-Huitenga (Filmkrant, Parool) and Kees Driessen (Filmkrant, Business Doc Europe) will host this open editorial meeting on innovative art journalism in the Fediverse.

As part of a research group on Digital Autonomy for the Dutch Innovation Fund for Journalism, Linssen has developed a journalist concept for the open social platforms of the Fediverse (Mastodon, PeerTube, Pixelfed, Bonfire, Castopod a.o). As a result, the server mastodon.cultuur.social was launched - based on principles of Design for the Margins, democracy and media, representation and belonging, and the need of physical connection versus digital connectivity.

it's not a workfare scheme. it's a boycott list.
#ukpol #burnham

If you love pylova so much why don’t you just marry it?

If you use #Telegram or know someone who does – there seems to be a remote code execution vulnerability in Telegram:
https://nitter.catsarch.com/v12sec/status/2120471754166415821

It is apparently being actively exploited.

The vulnerability is *bad*, it can lead to account take over or worse as it apparently provides the attacker with a way to run code directly on the device, outside of the sandbox.

Apparently it has now been patched, so install updates as soon as possible!

It relates to the new "widgets".

#InfoSec

@map I think you're missing the point..

@happyborg @librecast

Thank you for correcting me. A lot of the so-called “hard-coded” stuff that people accused PieFed of having ended up not being hard-coded at all, and in fact was opt-in, so even less mandatory than opt-out. But I see from the link that some of the blocks are indeed still opt-out so I need to adjust my thinking.

cross-posted from: piefed.social/…/piefed-v1-9-is-released-shared-bl…

New features

• Shared blocklists - these are like feeds except instead of listing communities to join it lists people to block. To to Account -> Blocklists to find this feature. Changes by the blocklist author effect all the people who subscribe to the list, causing them to block the list members. They federate, so you can subscribe to blocklists on other instances.
• Edit comments inline, without loading a separate page - wjs018
• Fediverse statistics at piefed.social/statistics
• 2-factor authentication (TOTP) - can be added to your account in the ‘Security’ page in your settings.

For admins

• Auto-ban based on the bans that instances you choose, with keyword matching on the ban reason. Go to /admin/users/auto_ban. Try putting ‘piefed.social’ in as the instance and ‘spam’ as the keyword filter. It’ll cut down on the work involved in running your instance SO much.
• Voting pattern graph on user profiles to help spot automated voting.
• Reset the password of any user.
• Lots of inauthentic behaviour reports for finding bots and serial downvoters, see /admin/votes and PM me for an instructional video. It’s a lot to take in but the video will explain it all.

API

• edit matrix user id when saving user profile data.
• scheduled post endpoints - wjs018

Plus a lot more bits and pieces, browse the list of recent releases in the 1.8.x line at codeberg.org/rimu/pyfedi/releases for details.

To upgrade from 1.8.x or earlier

git pull
git checkout v1.9.x

Then,

./deploy.sh or ./deploy-docker2.sh

Donations

PieFed is free and open-source software while operating without any advertising, monetization, or reliance on venture capital. Your donations are vital in supporting the PieFed development effort, allowing us to expand and enhance PieFed with new features.

Donations can be made via Patreon, Liberapay or Ko-fi.

Shared blocklists - these are like feeds except instead of listing communities to join it lists people to block. To to Account -> Blocklists to find this feature. Changes by the blocklist author effect all the people who subscribe to the list, causing them to block the list members. They federate, so you can subscribe to blocklists on other instances.

Maybe an unpopular opinion, but I have mixed feelings about the social/community implications of shared block lists.

It's essentially social blacklisting, and while it gives people more options for controlling what they see, I'm not entirely convinced it's healthy compared to manual blocking of users and servers on an individual level.