I hadn't heard of any Streams repository (fka Zap, fka Osada, etc) people for about two months and thought it had just gotten quiet. Instead the forum and the people post quite regularly, but communication with them from my Friendica has broken down. When trying to reconnect I got all the errors about not being able to recognise the protocol (when it fails to load the actor definition). Not even individual posts load correctly when providing the url.

So I thought this could be a use for my Pleroma. But it also mainly fails to connect... I can only load individual posts.

I love how you can see on Yusra Mardini's face how much she feels at home at a swimming pool. She stopped competitive swimming a while back, but she's here now in an ambassador role.

I'm starting to think no remote content should be stored at all, just maybe cached, but I understand how, currently, received text of posts can be stored similar to an email inbox.

But do I understand(*) correctly that Mastodon stores remote media as well, in their own media storage, even when from unsolicited sources? That can't be right.

(*) It is cited as a side effect of the spam wave that some are running out of media storage.

From my perspective the spam wave seems to have subsided, or maybe this post brings it in again... What I did:

On Pleroma put the discord invite url and the hashtag in MRF as blocks. On Friendica I don't have MRF, so I unsubscribed from guppe groups. That seems enough, I haven't had to block any domains yet, may do so later if needed.

The hashtag should probably not be blocked forever, as it is the Japanese name of a legitimate business which may be the target not the source of the impersonation/defamation attack, as is the discord. But since I have no Japanese contacts, that's ok for now.

I always have private messages blocked from people I don't follow, and I recently started hiding followers/followed accounts, which I think also helps a bit to limit such waves.

Hardly a 'crafted payload', more like a completely normal payload, just at another address...

Alice: hi, I'm Bob
Mastodon: hi Bob, you look different
Alice: never mind, I'm Bob, and I have changed my security keys. Please use these new ones when you validate a message from Bob, I mean me
Mastodon: will do
Alice: and by the way, if your user Carol sends a private message to Bob, send it to me instead, since I am Bob, as i said
Mastodon: fine, nothing suspicious there

(My simplistic summary of the recent disclosure. What is not stressed in the released details is that it doesn't change the profile of the impersonated user, Bob in the above, as its profile at the source is unaffected.)

It's that day again, the birthday of Stephanie Leonidas!

I choose Crusade in Jeans from my 'Watch for Stephanie' letterboxd list for the birthday rewatch. A long time ago I only knew her sister Georgina Leonidas and knew she was a very talented actress. I saw that her older sister Stephanie was also an actress and thought that even if she only had a fraction of the talent of her younger sister, she would still be worth watching. So I took a punt buying this dvd. That was a very lucky punt... Stephanie turned out to be one of the best actresses ever and I since try to watch everything with her in it!

letterboxd.com/gidikroon/list/…

Today is the birthday (+44 years) of Christina Ricci. I'll be rewatching a film from my 'Watch for Christina' list to celebrate. The top ones I all saw recently and since I quite like to rewatch Sleepy Hollow, that one it is. I think it may also be the first film I saw her in.
#ChristinaRicci #SleepyHollow #BirthdayRewatch

letterboxd.com/film/sleepy-hol…

Watch for Christina

Films I've seen that showcase the talents of Christina Ricci.

^{letterboxd.com}