Katherine Druckman @katherined@librem.one

I really like the green checkmark system in Mastodon, but when relying on them for trust it's important to keep in mind *what* you are trusting:

* The security of the remote site (hacked site could vouch for an attacker)
* The security of the Mastodon instance (same)
* The integrity of the Mastodon instance (a modified version could let the owner disable the remote check)

This is one reason why I like self-owned instances on the account owner's domain.
#security #trust #GreenCheckmark

I’ll say it again, because I broke my own rule and I’m reaping what I sowed:

Do not automate what you don’t know how to do manually.

Do. Not. Automate, what you don’t know how to do manually.

When a comedian doubles and triples down on making transphobic and antisemitic jokes, it doesn't say, "I'm a philosopher king, and no subject is off limits," so much as, "Punching down to please the mob is my only shot at success."

I am getting schooled by @shawnp0wers @katherined @kyle on @reality2cast about how to use Mastodon. Like, just learned that on searls.com I can put the rel="me" tag in a link back to my handle here. Unless I misunderstood, which happens.

We (the Ostrom Workshop at Indiana University, plus me and my wife, both visiting scholars there) are putting on this salon at the Computer History Museum in Mountain View, CA this coming Monday at 11am Pacific: https://events.iu.edu/ostromworkshop/event/644997-ostrom-workshop-beyond-the-web-salon-series-roger It's free, and online as well as in person. Registration is required for t he online side (it'll be zoomed). Sign up at that link. The speaker is Roger McNamee, former advisor to Mark Zuckerberg, and then the author of the bestseller, Zucked.

So this is when one starts Rabbits of Mastodon.

#rabbitsofmastodon

I’m John. I’ve fallen down the open source supply chain security rabbit hole. My current focus is around leveraging threat model and architecture information to facilitate automated context aware decentralized gamification / continuous improvement of the security lifecycle / posture of open source projects.

- https://gist.github.com/pdxjohnny/07b8c7b4a9e05579921aa3cc8aed4866
- https://github.com/intel/dffml/blob/alice/docs/tutorials/rolling_alice/0000_architecting_alice/README.md#rolling-alice-volume-0-introduction-and-context

https://mastodon.social/@pdxjohnny/109320563491316354