The Bookstore Battle https://sightlessscribbles.com/posts/the-bookstore-battle/ #IndieWeb #Blog #Blogging #Blogs
@irfan I prefer to use cash. It's easier to just hit up an ATM at a bank, far away from where I stay, and spend locally. I hate using QR codes for payments outside China/Hong Kong/Macao. #indieweb #nekoweb #socialmedia #neocities #fediverse #youtube
just btw;
I hope, all of this will make my IndieWebCamp Brighton demo of broken registerProtocolHandlers obsolete :)
https://www.youtube.com/live/W70wd56i0Bg?t=2030s
@jaffathecake
Once I had BrowserId then the renamed Persona then WebId and now it is https://developer.mozilla.org/de/docs/Web/API/FedCM_API I suppose.
Demos https://fedcm-demo-rp.dev/menu
Some articles said that Firefox will ship it in 2025 / 2026 - is that still true ?
Heh heh :D
https://blog.avas.space/parody-post/
via @82mhz
Has anyone used Nekoweb or neocities? I just got started with nekoweb so I can't wait to be fully off the mainstream internet. It's been a real shit show the past 2 decades.
I browsed some blogs hosted on both and they seem pretty functional, creative, and the sort of thing that I've been looking for.
I can't wait to have a reliable version of YouTube on the fediverse. Thinking about Odysee, but it seems to be infiltrated with crypto garbage....
#indieweb #nekoweb #socialmedia #neocities #fediverse #youtube
This article documents an instance of this problem:
* https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986
Small business websites tend to be sloppily written (no pun intended though that may also be true) and are likely riddled with numerous very fundamental security holes. There are many possible explanations (economics) from poor initial construction, perhaps using the latest new trendy framework rather than established hardened libraries, to lack of maintenance after initial setup. They have obvious holes like lack of server-side form validation (people being able to change values in forms using browser dev tools), and less obvious like buggy APIs allowing more access than they should.
In the past, many of these holes didn’t really matter because those sites were “not worth attacking” for the incentive models of human-based cyber-attackers or collectives thereof.
However, now that there are LLMs that have likely been trained on any number of common security holes in websites (and how to exploit them), when an “AI agent” is given a task, it may very well use any “tool” at its disposal, including website vulnerabilities to accomplish its goals, as illustrated by the example in the Australia ABC news article above.
Since such chatbots are now essentially "hack websites as a service", I expect we will see LOTS more of this happening, likely unintentionally, or sometimes with mild intention like “can you get me higher on the waitlist”.
Ultimately I think both the human giving instructions to (prompting) such chatbots and the creators of such chatbots should be held responsible for any such intrusions and any damage they cause, even if/when unintended.
There are a few things you can do about this emerging phenomenon:
1. If you use such “agents”, be very careful about what you ask it/them to do, avoiding asking for anything that’s morally gray or questionable at all, even something as “minor” as cutting the line in an online waitlist.
2. If you run a small business site, you have your work cut out for you. Pay a professional web developer to audit the security of your website, document what they find, and patch holes / repair it accordingly.
3. If you have accounts on small business sites you rarely or ever use, consider exporting any data (receipts, transactions), replacing your profile details (name, addresses, photos) with noise, and then deleting your account. If you need to use the site again, use a different email address (as recommended in https://tantek.com/2025/122/b1/more-steps-indieweb-cybersecurity) to create a new account.
That last tip is also helpful for reducing your own personal “attack surface”. By pruning your online accounts, you both reduce the number potential data breaches that you’re in, and reduce the places and ways that attackers can cause you trouble (or that you have to double-check if you’re ever the target of a cyber-attack)
Previously: https://tantek.com/2025/122/b1/more-steps-indieweb-cybersecurity
#CyberSecurity #Friday #cyber #security #cyberAttack #cyberAttacker #chatBot #chatBots #LLM #LLMs #AI #agent #agents #AIagent #AIagents
#Blaugust #Blaugust2026
New on the site, Occasional Weeknote 32: https://laze.net/2026/08/14/occasional-weeknote-32/
Some folks have been abandoning weeknotes, but I still like writing mine. They feel like I'm summarizing (for myself) life and what's been interesting me along the way.
P.S. public.monster appears to be... not letting me access my account at all? Entering the passcode fails to redirect to the dashboard for me. Sent the operator(s) an email already. Yikes for anyone using #PublicDotMonster #PublicMonster #whatever
And to think I saw a bunch of #IndieWeb posts praising it 😬
Edit: Forgot to mention it's my.public.monster now, it redirects you to my.public.monster but the website's front page doesn't make this clear
Content warning:Article: Geocaching.com Can't Count? (my 1000+ geocache finds!)
After finding over a thousand geocaches, I wanted to check my total with the largest of the geocache listing sites I use, and discovered that you can't get the same answer twice from it even if you ask it three times for an answer. Wot?
Read more: https://danq.me/2026/08/14/gccom-cant-count/
I write about politics at times because it affects all our lives, but I miss having a separate outlet for it. I don’t like it when my blog gets filled up with politics just because that’s what stirred me up that week. It’s not what I want to be about.
Ugh, I don’t want another site. Or do I? If I did, should it be a separate brand, or just a subdomain?
Nessuno potrà mai impedirmi di dire quello che voglio.
Nessuno può bloccare la mia voglia di comunicare.
Finchè avrò accesso a Internet, riuscirò a farlo in qualsiasi forma.
Devo imparare l'alfabeto Morse :P
[Indice]
Altri percorsi che puoi visitare
- @ (questo indice)
- hyblon (profile)
- stato (.plan/status)
- storico (logs)
- random (spara frasi a caso)
Adesso abbiamo anche il nostro Finger!
Dai un'occhiata alle mie cards personali.
Finger:
echo "hyblon" | nc net.iltabellinoweb.eu 79
oppure
finger hyblon@net.iltabellinoweb.euCapsula Gemini:
echo gemini://net.iltabellinoweb.eu | ncat -C --ssl net.iltabellinoweb.eu 1965
https://gts.iltabellinoweb.eu/@tabby/statuses/01KZV48CJMMR5FPGSTJ8ZGY2XD
RE: https://caneandable.social/@WeirdWriter/117082499715551480
People are giving up too easily. Indieweb protocols are both simple and beautiful. They are for techies right now, but we have to keep pushing to make them more widely accessible.
The Bookstore Battle https://sightlessscribbles.com/posts/the-bookstore-battle/ #Blog #Blogs #Blogging #IndieWeb #NoPaywall
Crawling on the IndieWeb: https://vert.wisp.place/blog/indieweb
#indieweb