{
    "type": "entry",
    "published": "2026-08-15T19:57:50.549Z",
    "url": "https://bsky.app/profile/did:plc:tk6bkjdozskzgb47umfelfpq/post/3mt5hh3epeh2d",
    "content": {
        "text": "Test post from Omnibear #micropub extension"
    },
    "author": {
        "type": "card",
        "name": "rmendes.net",
        "url": "https://bsky.app/profile/rmendes.net",
        "photo": null
    },
    "post-type": "note",
    "_id": "49250286",
    "_source": "9305",
    "_is_read": false
}

{
    "type": "entry",
    "published": "2026-08-15T19:57:15.300Z",
    "url": "https://bsky.app/profile/did:plc:tk6bkjdozskzgb47umfelfpq/post/3mt5hfzqwv62z",
    "content": {
        "text": "Improved Plume onboarding and fixed a few bugs #micropub\nand just after publishing this new version, I found a new bug, there should be 1.5.1 very soon !!!\n\nhttps://rmendes.net/notes/2026/08/15/21ba2"
    },
    "author": {
        "type": "card",
        "name": "rmendes.net",
        "url": "https://bsky.app/profile/rmendes.net",
        "photo": null
    },
    "post-type": "note",
    "_id": "49250287",
    "_source": "9305",
    "_is_read": false
}

{
    "type": "entry",
    "published": "2026-08-15T19:57:00.647Z",
    "url": "https://bsky.app/profile/did:plc:tk6bkjdozskzgb47umfelfpq/post/3mt5hflrsmq25",
    "content": {
        "text": "Improved Plume onboarding and fixed a few bugs #micropub\nand just after publishing this new version, I found a new bug, there should be 1.5.1 very soon !!!\n\nhttps://rmendes.net/notes/2026/08/15/21ba2"
    },
    "author": {
        "type": "card",
        "name": "rmendes.net",
        "url": "https://bsky.app/profile/rmendes.net",
        "photo": null
    },
    "post-type": "note",
    "_id": "49250288",
    "_source": "9305",
    "_is_read": false
}

{
    "type": "entry",
    "published": "2026-08-15T17:17:51.932Z",
    "url": "https://bsky.app/profile/did:plc:5h4udgpiko7ter3vqlxudzog/post/3mt56izeln22z",
    "content": {
        "text": "Looking for #moots\n\n\ud83d\udc80 #Horror\n\ud83c\udf10 #IndieWeb\n\ud83d\udc7b #Paranormal\n\ud83d\udc79 #Folklore & #UrbanLegends\n\ud83d\udcf8 #Photography\n\ud83e\udd18 #MetalHead\n\ud83c\udf92 #Hiking & #Geocaching\n\ud83d\udd0d #TrueCrime & #Mysteries\n\ud83d\udcf9 #VideoProduction\n\u2712\ufe0f Occasional #Blogger\n\ud83d\udd2b #TargetShooting\n\ud83e\udde0 #OCD #GAD\n\ud83c\udff3\ufe0f\u200d\ud83c\udf08 #LGBTQIA\n\nwww.Drennan.uk\nYouTube.com/ThingsThatGoBump\n\n#PromoSky",
        "html": "Looking for #moots\n\n\ud83d\udc80 #Horror\n\ud83c\udf10 #IndieWeb\n\ud83d\udc7b #Paranormal\n\ud83d\udc79 #Folklore & #UrbanLegends\n\ud83d\udcf8 #Photography\n\ud83e\udd18 #MetalHead\n\ud83c\udf92 #Hiking & #Geocaching\n\ud83d\udd0d #TrueCrime & #Mysteries\n\ud83d\udcf9 #VideoProduction\n\u2712\ufe0f Occasional #Blogger\n\ud83d\udd2b #TargetShooting\n\ud83e\udde0 #OCD #GAD\n\ud83c\udff3\ufe0f\u200d\ud83c\udf08 #LGBTQIA\n\nwww.Drennan.uk\nYouTube.com/ThingsThatGoBump\n\n#PromoSky"
    },
    "author": {
        "type": "card",
        "name": "drennan.uk",
        "url": "https://bsky.app/profile/drennan.uk",
        "photo": null
    },
    "post-type": "note",
    "_id": "49249140",
    "_source": "9305",
    "_is_read": false
}

Vika fireburn.ru

Domain in peril

{
    "type": "entry",
    "published": "2026-08-15T14:54:27.089218757+03:00",
    "url": "https://fireburn.ru/posts/dHpyTXV",
    "name": "Domain in peril",
    "content": {
        "text": "It looks like this domain is in peril.\nThe Russian government has made a law that you have to be identified via \u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438 to be able to manage a domain in the \".ru\" zone. Well, guess what, it's two weeks before the deadline, and I'm not up-to-date on this.\nI have a working \u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438 account. I could tie it to my registrar. There's just one hitch. The domain registrar still has my deadname on file and they don't seem to want to update it. And I can't bind my \u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438 to a domain which isn't registered \"in my name\" (meaning the data has to match).\nWell, partially this is on me, I guess, I should've been more proactive in managing my domain owner info. But can you blame a girl for only learning about all this around July? And it all worked just fine before, the registrar for whatever reason didn't even care that the passport on file was expired, like, five renewal terms ago.\nBut now the form that updates one's owner data is silently eating my documents with zero feedback and I feel like I'll have to message support (which I did) and wait for their reply.\nI guess the 14-year old me made a mistake when trusting my country with something so precious. And now I am paying the price for her lapse in judgement (but how could she have known?!)\nWhat do I stand to lose?\nThankfully, the domain's not gonna be cancelled, but if I don't manage to update all of the data and bind the \u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438 account in time, I may not able to renew it when winter comes. And this means I lose the domain in around 5 months. Let's try to enumerate what will be impacted:\nE-mail\nThankfully, my email is self-hosted. My archives are going to be fine. But the ability to receive email may be compromised as a result. And when some services don't allow changing your email address, because somebody had a bright idea of using email as primary key, that might be a problem.\nI'll need to compile a list of services I've ever registered on and see if any of them could accept an alternative email address.\nOh, and I'll have to put MX records on my other domain, probably. I think I could just route them to the same underlying mail server; Reverse-DNS could throw a spanner in the works, but surely one could work around that?\u2026 I'll need more research on this topic.\nBlog permalinks\nI've been linked around the web. I'm no celebrity, but I think there could be a few dozen permalinks on the Internet that will inevitably break if I have to move domains. Some of them are on publicly-editable websites, and I could update them; some of them are not and the website owners will have to put in the work.\nHopefully my website was crawled by the Web Archive? I'll need to test that~ I don't think I ever put on a robots.txt on the apex, so there should be nothing preventing archive.org from crawling my permalinks.\nIndieAuth\nThis domain is my IndieAuth identity. And while the website itself will be forever preserved (and could move to another domain if needed), I'm not sure how IndieAuth consumers might handle my me value changing.\nI planned to do roughly the following:\nMigrate my blog to another domain\nPut an IndieAuth shim onto this domain that redirects to the new location of my blog\nTry logging in around the web (mostly the IndieAuth wiki)\nSeeing if initiating the ceremony with https://fireburn.ru/ and ending it with me=\"https://vikanezrimaya.xyz/\" is gonna be handled correctly\nThe answer to the last bullet point: probably not. As far as I understand (and I've written two or three IndieAuth implementations from scratch, so I know a thing or two about the protocol), the domain is the root of identity, and a different me value is a different user entirely. This is how someone on a multi-identity website could log in with the root of their website and get to an identity selector that would allow them to choose the hat to wear for this sign-in. Every single persona is a different IndieAuth identity, because it's a different URL. And I don't know if any software would interpret something like a 301 redirect from a me value as a sign that it will need to be replaced \u2014 after all, somebody could be using me as the primary key (see the \"E-mail\" section above!).\nMemories\nWell, those will remain. As long as the archives have crawled my blog. As long as I live. But it's still gonna be sad to lose such a memento \u2014 a domain I owned almost since the day I gained a semblance of legal personhood in form of a passport and a bank card.\nI even messaged the support of my registrar back in the day, asking if one needed to be of age to register the domain. \"No\", they said, \"having a passport and a valid payment method are the only requirements\". It was a small window into the world for me \u2014 a place of my own.\nI don't want to lose it. \ud83d\ude2d\nAfterword\nIf anything happens. If this page disappears from the internet. Look for me at vikanezrimaya.xyz \u2014 I promise I'll try hard not to lose that one.\nI'll make sure this page is crawled by the Archive as soon as I post it, so this forever remains in history even if the domain were to be lost.",
        "html": "<p>It looks like this domain is in peril.</p>\n<p>The Russian government has made a law that you have to be identified via \u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438 to be able to manage a domain in the \".ru\" zone. Well, guess what, it's two weeks before the deadline, and I'm not up-to-date on this.</p>\n<p>I have a working \u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438 account. I could tie it to my registrar. There's just one hitch. The domain registrar still has my deadname on file and they don't seem to want to update it. And I can't bind my \u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438 to a domain which isn't registered \"in my name\" (meaning the data has to match).</p>\n<p>Well, partially this is on me, I guess, I should've been more proactive in managing my domain owner info. But can you blame a girl for only learning about all this around July? And it all worked just fine before, the registrar for whatever reason didn't even care that the passport on file was <em>expired, like, five renewal terms ago</em>.</p>\n<p>But now the form that updates one's owner data is silently eating my documents with zero feedback and I feel like I'll have to message support (which I did) and wait for their reply.</p>\n<p>I guess the 14-year old me made a mistake when trusting my country with something so precious. And now I am paying the price for her lapse in judgement (but how could she have known?!)</p>\n<h2>What do I stand to lose?</h2>\n<p>Thankfully, the domain's not gonna be cancelled, but if I don't manage to update all of the data and bind the \u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438 account in time, I may not able to renew it when winter comes. And this means I lose the domain in around 5 months. Let's try to enumerate what will be impacted:</p>\n<h3>E-mail</h3>\n<p>Thankfully, my email is self-hosted. My archives are going to be fine. But the ability to <em>receive</em> email may be compromised as a result. And when some services don't allow changing your email address, because somebody had a bright idea of using email as primary key, that might be a problem.</p>\n<p>I'll need to compile a list of services I've ever registered on and see if any of them could accept an alternative email address.</p>\n<p>Oh, and I'll have to put MX records on my other domain, probably. I think I could just route them to the same underlying mail server; Reverse-DNS could throw a spanner in the works, but surely one could work around that?\u2026 I'll need more research on this topic.</p>\n<h3>Blog permalinks</h3>\n<p>I've been linked around the web. I'm no celebrity, but I think there could be a few dozen permalinks on the Internet that will inevitably break if I have to move domains. Some of them are on publicly-editable websites, and I could update them; some of them are <em>not</em> and the website owners will have to put in the work.</p>\n<p>Hopefully my website was crawled by the Web Archive? I'll need to test that~ I don't think I ever put on a <code>robots.txt</code> on the apex, so there should be nothing preventing archive.org from crawling my permalinks.</p>\n<h3>IndieAuth</h3>\n<p>This domain is my <a href=\"https://indieweb.org/IndieAuth\">IndieAuth</a> identity. And while the website itself will be forever preserved (and could move to another domain if needed), I'm not sure how IndieAuth consumers might handle my <code>me</code> value changing.</p>\n<p>I planned to do roughly the following:</p>\n<ul><li>Migrate my blog to another domain</li>\n<li>Put an IndieAuth shim onto this domain that redirects to the new location of my blog</li>\n<li>Try logging in around the web (mostly the IndieAuth wiki)</li>\n<li>Seeing if initiating the ceremony with <code>https://fireburn.ru/</code> and ending it with <code>me=\"https://vikanezrimaya.xyz/\"</code> is gonna be handled correctly</li>\n</ul><p>The answer to the last bullet point: <em>probably not</em>. As far as I understand (and I've written two or three IndieAuth implementations <em>from scratch</em>, so I know a thing or two about the protocol), the domain is the root of identity, and a different <code>me</code> value <em>is a different user entirely</em>. This is how someone on a multi-identity website could log in with the root of their website and get to an <em>identity selector</em> that would allow them to choose the hat to wear for this sign-in. Every single persona is a different IndieAuth identity, because it's a different URL. And I don't know if any software would interpret something like a 301 redirect from a <code>me</code> value as a sign that it will need to be replaced \u2014 after all, somebody could be using <code>me</code> as the primary key (see the \"E-mail\" section above!).</p>\n<h3>Memories</h3>\n<p>Well, those will remain. As long as the archives have crawled my blog. As long as I live. But it's still gonna be sad to lose such a memento \u2014 a domain I owned almost since the day I gained a semblance of legal personhood in form of a passport and a bank card.</p>\n<p>I even messaged the support of my registrar back in the day, asking if one needed to be of age to register the domain. \"No\", they said, \"having a passport and a valid payment method are the only requirements\". It was a small window into the world for me \u2014 a place of my own.</p>\n<p><em>I don't want to lose it.</em> \ud83d\ude2d</p>\n<h2>Afterword</h2>\n<p>If anything happens. If this page disappears from the internet. Look for me at <a href=\"https://vikanezrimaya.xyz\">vikanezrimaya.xyz</a> \u2014 I promise I'll try hard not to lose that one.</p>\n<p>I'll make sure this page is crawled by the Archive as soon as I post it, so this forever remains in history even if the domain were to be lost.</p>"
    },
    "author": {
        "type": "card",
        "name": "Vika",
        "url": "https://fireburn.ru/",
        "photo": "https://fireburn.ru/.kittybox/media/uploads/fe/ad/f8/76/e94e284444605135ad468b1563070dac3d2ad642c366b1e180f6eb65"
    },
    "post-type": "article",
    "_id": "49249041",
    "_source": "1371",
    "_is_read": false
}

{
    "type": "entry",
    "published": "2026-08-15T16:11:35.613Z",
    "url": "https://bsky.app/profile/did:plc:jkzhf3zklgkrz4tx3mtiuwdm/post/3mt52sjaxndd5",
    "content": {
        "text": "I\u2019ve been updating the whole website to a new layout page by page!! This layout is a little better for viewing on mobile. I wanted it to be at least mildly navigable on mobile lol #indieweb"
    },
    "author": {
        "type": "card",
        "name": "deyathemuniz.bsky.social",
        "url": "https://bsky.app/profile/deyathemuniz.bsky.social",
        "photo": null
    },
    "post-type": "note",
    "_id": "49248747",
    "_source": "9305",
    "_is_read": false
}

{
    "type": "entry",
    "author": {
        "name": "#indieweb",
        "url": "https://mastodon.social/tags/indieweb",
        "photo": null
    },
    "url": "https://toot.wales/@mort8088/117100305124374389",
    "content": {
        "html": "<p>Dave Henry Blog - 2026 Blaugust 04 - Bubbles and stuff</p><p><a href=\"https://toot.wales/tags/blaugust\">#<span>blaugust</span></a> <a href=\"https://toot.wales/tags/blaugust2026\">#<span>blaugust2026</span></a> <a href=\"https://toot.wales/tags/indieWeb\">#<span>indieWeb</span></a> </p><p><a href=\"https://davehenry.blog/2026/08/2026-blaugust-04-bubbles-and-stuff/\"><span>https://</span><span>davehenry.blog/2026/08/2026-bl</span><span>august-04-bubbles-and-stuff/</span></a></p>",
        "text": "Dave Henry Blog - 2026 Blaugust 04 - Bubbles and stuff\n\n#blaugust #blaugust2026 #indieWeb \n\nhttps://davehenry.blog/2026/08/2026-blaugust-04-bubbles-and-stuff/"
    },
    "published": "2026-08-15T15:47:35+00:00",
    "post-type": "note",
    "_id": "49248562",
    "_source": "8007",
    "_is_read": false
}

{
    "type": "entry",
    "published": "2026-08-15T14:28:52.029Z",
    "url": "https://bsky.app/profile/did:plc:cdsdfye47rh6coqkb6ffsya7/post/3mt4v2t7w5c2x",
    "content": {
        "text": "The indieweb concept POSSE (Post on your Own Site Syndicate Elsewhere) comes to mind.\n\nAlso provide Atom/RSS feeds!\nThey let people follow updates on your website without needing an account or such. A lot of CMS and SSG software will generate them for you too."
    },
    "author": {
        "type": "card",
        "name": "luna.at.lunareclipse.zone",
        "url": "https://bsky.app/profile/luna.at.lunareclipse.zone",
        "photo": null
    },
    "post-type": "note",
    "_id": "49247899",
    "_source": "9305",
    "_is_read": false
}

{
    "type": "entry",
    "author": {
        "name": "#indieweb",
        "url": "https://mastodon.social/tags/indieweb",
        "photo": null
    },
    "url": "https://caneandable.social/@WeirdWriter/117099858030610576",
    "content": {
        "html": "<p>There's a good reason why I rarely visit websites I follow via RSS, and, instead, choose to read in my RSS reader. While the rest of the <a href=\"https://caneandable.social/tags/IndieWeb\">#<span>IndieWeb</span></a> are today saying RSS readers are flawed because they strip out the amazing web design by default, I am here to protest and say, actually, every RSS app that does this is doing you and I a massive favor.</p><p>Your web design is certainly not worth putting up with if I dislike it the first time.</p><p>If I wanted to appreciate your web design, I wouldn't use an RSS reader.</p><p>My before morning tea snark.</p><p>Given this recent discourse, before long, the IndieWeb will turn around and say 'actually, ads are part of the human web!'</p><p>I need tea before I snark myself into an IRC chat room. :)</p><p><a href=\"https://caneandable.social/tags/RSS\">#<span>RSS</span></a> <a href=\"https://caneandable.social/tags/WebDev\">#<span>WebDev</span></a></p>",
        "text": "There's a good reason why I rarely visit websites I follow via RSS, and, instead, choose to read in my RSS reader. While the rest of the #IndieWeb are today saying RSS readers are flawed because they strip out the amazing web design by default, I am here to protest and say, actually, every RSS app that does this is doing you and I a massive favor.\n\nYour web design is certainly not worth putting up with if I dislike it the first time.\n\nIf I wanted to appreciate your web design, I wouldn't use an RSS reader.\n\nMy before morning tea snark.\n\nGiven this recent discourse, before long, the IndieWeb will turn around and say 'actually, ads are part of the human web!'\n\nI need tea before I snark myself into an IRC chat room. :)\n\n#RSS #WebDev"
    },
    "published": "2026-08-15T13:53:52+00:00",
    "post-type": "note",
    "_id": "49247623",
    "_source": "8007",
    "_is_read": false
}

{
    "type": "entry",
    "author": {
        "name": "#indieweb",
        "url": "https://mastodon.social/tags/indieweb",
        "photo": null
    },
    "url": "https://infosec.exchange/@michaelharley/117099456958214172",
    "content": {
        "html": "<p>How I share links on my blog</p><p>Someone emailed me about my link sharing workflow so I thought I'd just document it for everyone to see.</p><p><a href=\"https://michaelharley.net/posts/2026/08/15/how-i-share-links-on-my-blog/\"><span>https://</span><span>michaelharley.net/posts/2026/0</span><span>8/15/how-i-share-links-on-my-blog/</span></a></p><p><a href=\"https://infosec.exchange/tags/Blogging\">#<span>Blogging</span></a> <a href=\"https://infosec.exchange/tags/IndieWeb\">#<span>IndieWeb</span></a> <a href=\"https://infosec.exchange/tags/Blaugust\">#<span>Blaugust</span></a> <a href=\"https://infosec.exchange/tags/Blaugust2026\">#<span>Blaugust2026</span></a></p>",
        "text": "How I share links on my blog\n\nSomeone emailed me about my link sharing workflow so I thought I'd just document it for everyone to see.\n\nhttps://michaelharley.net/posts/2026/08/15/how-i-share-links-on-my-blog/\n\n#Blogging #IndieWeb #Blaugust #Blaugust2026"
    },
    "published": "2026-08-15T12:11:53+00:00",
    "post-type": "note",
    "_id": "49246800",
    "_source": "8007",
    "_is_read": false
}

{
    "type": "entry",
    "published": "2026-08-15T12:11:53.622Z",
    "url": "https://bsky.app/profile/did:plc:xfdjeyobuvkrwjaqtcueyr5m/post/3mt4nfvkubj2h",
    "content": {
        "text": "How I share links on my blog\n\nhttps://michaelharley.net/posts/2026/08/15/how-i-share-links-on-my-blog/\n\n#Blogging #IndieWeb #Blaugust #Blaugust2026"
    },
    "author": {
        "type": "card",
        "name": "michaelharley.net",
        "url": "https://bsky.app/profile/michaelharley.net",
        "photo": null
    },
    "post-type": "note",
    "_id": "49246730",
    "_source": "9305",
    "_is_read": false
}

{
    "type": "entry",
    "author": {
        "name": "#indieweb",
        "url": "https://mastodon.social/tags/indieweb",
        "photo": null
    },
    "url": "https://mastodon.online/@transquinnzel/117099004602573991",
    "content": {
        "html": "<p>Just moved away from clourflare tunnels to hosting my website back on 1984.hosting. I use Anubis to block ai scrappers and have setup a tor hidden service as a backup. </p><p>You can get to it at the normal domain: godfrey.online<br />And the Tor address: rengrm2kdmv3mwxkvizyupyo3bcol3fhe7dqzydttpgnom6c3yni43id.onion</p><p>NOTE: Floatplane and MeansTV RSS should still work and are excluded from Anubis. </p><p><a href=\"https://mastodon.online/tags/cloudflare\">#<span>cloudflare</span></a> <a href=\"https://mastodon.online/tags/anubis\">#<span>anubis</span></a> <a href=\"https://mastodon.online/tags/tor\">#<span>tor</span></a> <a href=\"https://mastodon.online/tags/indieweb\">#<span>indieweb</span></a></p>",
        "text": "Just moved away from clourflare tunnels to hosting my website back on 1984.hosting. I use Anubis to block ai scrappers and have setup a tor hidden service as a backup. \n\nYou can get to it at the normal domain: godfrey.online\nAnd the Tor address: rengrm2kdmv3mwxkvizyupyo3bcol3fhe7dqzydttpgnom6c3yni43id.onion\n\nNOTE: Floatplane and MeansTV RSS should still work and are excluded from Anubis. \n\n#cloudflare #anubis #tor #indieweb"
    },
    "published": "2026-08-15T10:16:50+00:00",
    "post-type": "note",
    "_id": "49246011",
    "_source": "8007",
    "_is_read": false
}

{
    "type": "entry",
    "author": {
        "name": "#webmention",
        "url": "https://mastodon.social/tags/webmention",
        "photo": null
    },
    "url": "https://fed.brid.gy/r/https://bsky.app/profile/did:plc:bpotnohnlgcj3fbmp7ugx4en/post/3mt4a2kqivc2m",
    "content": {
        "html": "<p>Because it supposedly affects the exposure of an \"influencer\" if they have non-interacting and no activity followers (which Instagram constatly debunked but these \"influencers\" won't listen).<br /><br />Keep posting, that's how <a href=\"https://bsky.app/search?q=%23blogging\">#blogging</a> and <a href=\"https://bsky.app/search?q=%23SNS\">#SNS</a> / <a href=\"https://bsky.app/search?q=%23SocialMedia\">#SocialMedia</a> was. That's why I want <a href=\"https://bsky.app/search?q=%23Webmention\">#Webmention</a> implemented.</p>",
        "text": "Because it supposedly affects the exposure of an \"influencer\" if they have non-interacting and no activity followers (which Instagram constatly debunked but these \"influencers\" won't listen).\n\nKeep posting, that's how #blogging and #SNS / #SocialMedia was. That's why I want #Webmention implemented."
    },
    "published": "2026-08-15T08:12:50+00:00",
    "post-type": "note",
    "_id": "49245057",
    "_source": "8007",
    "_is_read": false
}

{
    "type": "entry",
    "author": {
        "name": "#indieweb",
        "url": "https://mastodon.social/tags/indieweb",
        "photo": null
    },
    "url": "https://caneandable.social/@WeirdWriter/117098317141950679",
    "content": {
        "html": "<p>The Bookstore Battle <a href=\"https://sightlessscribbles.com/posts/the-bookstore-battle/\"><span>https://</span><span>sightlessscribbles.com/posts/t</span><span>he-bookstore-battle/</span></a> <a href=\"https://caneandable.social/tags/IndieWeb\">#<span>IndieWeb</span></a> <a href=\"https://caneandable.social/tags/Blog\">#<span>Blog</span></a> <a href=\"https://caneandable.social/tags/Blogging\">#<span>Blogging</span></a> <a href=\"https://caneandable.social/tags/Blogs\">#<span>Blogs</span></a></p>",
        "text": "The Bookstore Battle https://sightlessscribbles.com/posts/the-bookstore-battle/ #IndieWeb #Blog #Blogging #Blogs"
    },
    "published": "2026-08-15T07:22:00+00:00",
    "post-type": "note",
    "_id": "49244803",
    "_source": "8007",
    "_is_read": false
}

{
    "type": "entry",
    "author": {
        "name": "#indieweb",
        "url": "https://mastodon.social/tags/indieweb",
        "photo": null
    },
    "url": "https://sakurajima.social/notes/apxkkxoxyn",
    "content": {
        "html": "<p><a class=\"u-url\" href=\"https://sakurajima.social/@irfan\">@irfan</a> I prefer to use cash. It's easier to just hit up an ATM at a bank, far away from where I stay, and spend locally. I hate using QR codes for payments outside China/Hong Kong/Macao. <a href=\"https://sakurajima.social/tags/indieweb\">#indieweb</a> <a href=\"https://sakurajima.social/tags/nekoweb\">#nekoweb</a> <a href=\"https://sakurajima.social/tags/socialmedia\">#socialmedia</a> <a href=\"https://sakurajima.social/tags/neocities\">#neocities</a> <a href=\"https://sakurajima.social/tags/fediverse\">#fediverse</a> <a href=\"https://sakurajima.social/tags/youtube\">#youtube</a></p>",
        "text": "@irfan I prefer to use cash. It's easier to just hit up an ATM at a bank, far away from where I stay, and spend locally. I hate using QR codes for payments outside China/Hong Kong/Macao. #indieweb #nekoweb #socialmedia #neocities #fediverse #youtube"
    },
    "published": "2026-08-15T06:39:12+00:00",
    "post-type": "note",
    "_id": "49244679",
    "_source": "8007",
    "_is_read": false
}

{
    "type": "entry",
    "author": {
        "name": "#indieweb",
        "url": "https://mastodon.social/tags/indieweb",
        "photo": null
    },
    "url": "https://digitalcourage.social/@sl007/117098073621408205",
    "content": {
        "html": "<p><span class=\"h-card\"><a class=\"u-url\" href=\"https://zotum.net/channel/fentiger\">@<span>fentiger</span></a></span> </p><p>just btw; <br />I hope, all of this will make my IndieWebCamp Brighton demo of broken registerProtocolHandlers obsolete :) <br /><a href=\"https://www.youtube.com/live/W70wd56i0Bg?t=2030s\"><span>https://www.</span><span>youtube.com/live/W70wd56i0Bg?t</span><span>=2030s</span></a></p><p><span class=\"h-card\"><a class=\"u-url\" href=\"https://mastodon.social/@jaffathecake\">@<span>jaffathecake</span></a></span> <br />Once I had BrowserId then the renamed Persona then WebId and now it is <a href=\"https://developer.mozilla.org/de/docs/Web/API/FedCM_API\"><span>https://</span><span>developer.mozilla.org/de/docs/</span><span>Web/API/FedCM_API</span></a> I suppose.<br />Demos <a href=\"https://fedcm-demo-rp.dev/menu\"><span>https://</span><span>fedcm-demo-rp.dev/menu</span><span></span></a> <br />Some articles said that Firefox will ship it in 2025 / 2026 - is that still true ?</p><p><a href=\"https://digitalcourage.social/tags/indieweb\">#<span>indieweb</span></a> <a href=\"https://digitalcourage.social/tags/indieauth\">#<span>indieauth</span></a> <a href=\"https://digitalcourage.social/tags/activitypub\">#<span>activitypub</span></a> <a href=\"https://digitalcourage.social/tags/federation\">#<span>federation</span></a> <a href=\"https://digitalcourage.social/tags/oauth\">#<span>oauth</span></a></p>",
        "text": "@fentiger \n\njust btw; \nI hope, all of this will make my IndieWebCamp Brighton demo of broken registerProtocolHandlers obsolete :) \nhttps://www.youtube.com/live/W70wd56i0Bg?t=2030s\n\n@jaffathecake \nOnce I had BrowserId then the renamed Persona then WebId and now it is https://developer.mozilla.org/de/docs/Web/API/FedCM_API I suppose.\nDemos https://fedcm-demo-rp.dev/menu \nSome articles said that Firefox will ship it in 2025 / 2026 - is that still true ?\n\n#indieweb #indieauth #activitypub #federation #oauth"
    },
    "published": "2026-08-15T06:20:05+00:00",
    "post-type": "note",
    "_id": "49244498",
    "_source": "8007",
    "_is_read": false
}

{
    "type": "entry",
    "author": {
        "name": "#indieweb",
        "url": "https://mastodon.social/tags/indieweb",
        "photo": null
    },
    "url": "https://mementomori.social/@sampsa/117098039882909601",
    "content": {
        "html": "<p>Heh heh :D</p><p><a href=\"https://blog.avas.space/parody-post/\"><span>https://</span><span>blog.avas.space/parody-post/</span><span></span></a></p><p>via <span class=\"h-card\"><a class=\"u-url\" href=\"https://mastodon.bsd.cafe/@82mhz\">@<span>82mhz</span></a></span> </p><p><a href=\"https://mementomori.social/tags/smallweb\">#<span>smallweb</span></a> <a href=\"https://mementomori.social/tags/smolnet\">#<span>smolnet</span></a> <a href=\"https://mementomori.social/tags/indieweb\">#<span>indieweb</span></a></p>",
        "text": "Heh heh :D\n\nhttps://blog.avas.space/parody-post/\n\nvia @82mhz \n\n#smallweb #smolnet #indieweb"
    },
    "published": "2026-08-15T06:11:30+00:00",
    "post-type": "note",
    "_id": "49244499",
    "_source": "8007",
    "_is_read": false
}

{
    "type": "entry",
    "author": {
        "name": "#indieweb",
        "url": "https://mastodon.social/tags/indieweb",
        "photo": null
    },
    "url": "https://sakurajima.social/notes/apxe4l4ouf",
    "content": {
        "html": "<p><span>Has anyone used Nekoweb or neocities? I just got started with nekoweb so I can't wait to be fully off the mainstream internet. It's been a real shit show the past 2 decades.<br /><br />I browsed some blogs hosted on both and they seem pretty functional, creative, and the sort of thing that I've been looking for. <br /><br />I can't wait to have a reliable version of YouTube on the fediverse. Thinking about Odysee, but it seems to be infiltrated with crypto garbage....<br /><br /></span><a href=\"https://sakurajima.social/tags/indieweb\">#indieweb</a> <a href=\"https://sakurajima.social/tags/nekoweb\">#nekoweb</a> <a href=\"https://sakurajima.social/tags/socialmedia\">#socialmedia</a> <a href=\"https://sakurajima.social/tags/neocities\">#neocities</a> <a href=\"https://sakurajima.social/tags/fediverse\">#fediverse</a> <a href=\"https://sakurajima.social/tags/youtube\">#youtube</a></p>",
        "text": "Has anyone used Nekoweb or neocities? I just got started with nekoweb so I can't wait to be fully off the mainstream internet. It's been a real shit show the past 2 decades.\n\nI browsed some blogs hosted on both and they seem pretty functional, creative, and the sort of thing that I've been looking for. \n\nI can't wait to have a reliable version of YouTube on the fediverse. Thinking about Odysee, but it seems to be infiltrated with crypto garbage....\n\n#indieweb #nekoweb #socialmedia #neocities #fediverse #youtube"
    },
    "published": "2026-08-15T03:38:31+00:00",
    "post-type": "note",
    "_id": "49243544",
    "_source": "8007",
    "_is_read": false
}

Tantek Çelik tantek.com

{
    "type": "entry",
    "published": "2026-08-14 13:41-0700",
    "url": "http://tantek.com/2026/226/t1/cybersecurity-friday-small-business",
    "category": [
        "CyberSecurity",
        "Friday",
        "cyber",
        "security",
        "cyberAttack",
        "cyberAttacker",
        "chatBot",
        "chatBots",
        "LLM",
        "LLMs",
        "AI",
        "agent",
        "agents",
        "AIagent",
        "AIagents",
        "Blaugust",
        "Blaugust2026"
    ],
    "content": {
        "text": "CSF_03: today\u2019s Cybersecurity Friday post: the effective security of small business websites has likely gotten worse due to LLMs and \u201cAI agents\u201d (with or without safeguards) and what actions you may want to consider.\n\nThis article documents an instance of this problem:\n* https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986\n\nSmall business websites tend to be sloppily written (no pun intended though that may also be true) and are likely riddled with numerous very fundamental security holes. There are many possible explanations (economics) from poor initial construction, perhaps using the latest new trendy framework rather than established hardened libraries, to lack of maintenance after initial setup. They have obvious holes like lack of server-side form validation (people being able to change values in forms using browser dev tools), and less obvious like buggy APIs allowing more access than they should.\n\nIn the past, many of these holes didn\u2019t really matter because those sites were \u201cnot worth attacking\u201d for the incentive models of human-based cyber-attackers or collectives thereof.\n\nHowever, now that there are LLMs that have likely been trained on any number of common security holes in websites (and how to exploit them), when an \u201cAI agent\u201d is given a task, it may very well use any \u201ctool\u201d at its disposal, including website vulnerabilities to accomplish its goals, as illustrated by the example in the Australia ABC news article above.\n\nSince such chatbots are now essentially \"hack websites as a service\", I expect we will see LOTS more of this happening, likely unintentionally, or sometimes with mild intention like \u201ccan you get me higher on the waitlist\u201d.\n\nUltimately I think both the human giving instructions to (prompting) such chatbots and the creators of such chatbots should be held responsible for any such intrusions and any damage they cause, even if/when unintended.\n\nThere are a few things you can do about this emerging phenomenon:\n\n1. If you use such \u201cagents\u201d, be very careful about what you ask it/them to do, avoiding asking for anything that\u2019s morally gray or questionable at all, even something as \u201cminor\u201d as cutting the line in an online waitlist.\n\n2. If you run a small business site, you have your work cut out for you. Pay a professional web developer to audit the security of your website, document what they find, and patch holes / repair it accordingly.\n\n3. If you have accounts on small business sites you rarely or ever use, consider exporting any data (receipts, transactions), replacing your profile details (name, addresses, photos) with noise, and then deleting your account. If you need to use the site again, use a different email address (as recommended in https://tantek.com/2025/122/b1/more-steps-indieweb-cybersecurity) to create a new account.\n\nThat last tip is also helpful for reducing your own personal \u201cattack surface\u201d. By pruning your online accounts, you both reduce the number potential data breaches that you\u2019re in, and reduce the places and ways that attackers can cause you trouble (or that you have to double-check if you\u2019re ever the target of a cyber-attack)\n\nPreviously: https://tantek.com/2025/122/b1/more-steps-indieweb-cybersecurity\n\n#CyberSecurity #Friday #cyber #security #cyberAttack #cyberAttacker #chatBot #chatBots #LLM #LLMs #AI #agent #agents #AIagent #AIagents\n#Blaugust #Blaugust2026",
        "html": "CSF_03: today\u2019s Cybersecurity Friday post: the effective security of small business websites has likely gotten worse due to LLMs and \u201cAI agents\u201d (with or without safeguards) and what actions you may want to consider.<br /><br />This article documents an instance of this problem:<br />* <a href=\"https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986\">https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986</a><br /><br />Small business websites tend to be sloppily written (no pun intended though that may also be true) and are likely riddled with numerous very fundamental security holes. There are many possible explanations (economics) from poor initial construction, perhaps using the latest new trendy framework rather than established hardened libraries, to lack of maintenance after initial setup. They have obvious holes like lack of server-side form validation (people being able to change values in forms using browser dev tools), and less obvious like buggy APIs allowing more access than they should.<br /><br />In the past, many of these holes didn\u2019t really matter because those sites were \u201cnot worth attacking\u201d for the incentive models of human-based cyber-attackers or collectives thereof.<br /><br />However, now that there are LLMs that have likely been trained on any number of common security holes in websites (and how to exploit them), when an \u201cAI agent\u201d is given a task, it may very well use any \u201ctool\u201d at its disposal, including website vulnerabilities to accomplish its goals, as illustrated by the example in the Australia ABC news article above.<br /><br />Since such chatbots are now essentially \"hack websites as a service\", I expect we will see LOTS more of this happening, likely unintentionally, or sometimes with mild intention like \u201ccan you get me higher on the waitlist\u201d.<br /><br />Ultimately I think both the human giving instructions to (prompting) such chatbots and the creators of such chatbots should be held responsible for any such intrusions and any damage they cause, even if/when unintended.<br /><br />There are a few things you can do about this emerging phenomenon:<br /><br />1. If you use such \u201cagents\u201d, be very careful about what you ask it/them to do, avoiding asking for anything that\u2019s morally gray or questionable at all, even something as \u201cminor\u201d as cutting the line in an online waitlist.<br /><br />2. If you run a small business site, you have your work cut out for you. Pay a professional web developer to audit the security of your website, document what they find, and patch holes / repair it accordingly.<br /><br />3. If you have accounts on small business sites you rarely or ever use, consider exporting any data (receipts, transactions), replacing your profile details (name, addresses, photos) with noise, and then deleting your account. If you need to use the site again, use a different email address (as recommended in <a href=\"https://tantek.com/2025/122/b1/more-steps-indieweb-cybersecurity\">https://tantek.com/2025/122/b1/more-steps-indieweb-cybersecurity</a>) to create a new account.<br /><br />That last tip is also helpful for reducing your own personal \u201cattack surface\u201d. By pruning your online accounts, you both reduce the number potential data breaches that you\u2019re in, and reduce the places and ways that attackers can cause you trouble (or that you have to double-check if you\u2019re ever the target of a cyber-attack)<br /><br />Previously: <a href=\"https://tantek.com/2025/122/b1/more-steps-indieweb-cybersecurity\">https://tantek.com/2025/122/b1/more-steps-indieweb-cybersecurity</a><br /><br />#<span class=\"p-category\">CyberSecurity</span> #<span class=\"p-category\">Friday</span> #<span class=\"p-category\">cyber</span> #<span class=\"p-category\">security</span> #<span class=\"p-category\">cyberAttack</span> #<span class=\"p-category\">cyberAttacker</span> #<span class=\"p-category\">chatBot</span> #<span class=\"p-category\">chatBots</span> #<span class=\"p-category\">LLM</span> #<span class=\"p-category\">LLMs</span> #<span class=\"p-category\">AI</span> #<span class=\"p-category\">agent</span> #<span class=\"p-category\">agents</span> #<span class=\"p-category\">AIagent</span> #<span class=\"p-category\">AIagents</span><br />#<span class=\"p-category\">Blaugust</span> #<span class=\"p-category\">Blaugust2026</span>"
    },
    "author": {
        "type": "card",
        "name": "Tantek \u00c7elik",
        "url": "https://tantek.com/",
        "photo": "https://aperture-media.p3k.io/tantek.com/acfddd7d8b2c8cf8aa163651432cc1ec7eb8ec2f881942dca963d305eeaaa6b8.jpg"
    },
    "post-type": "note",
    "_id": "49242906",
    "_source": "1",
    "_is_read": false
}

gRegor Morrill gregorlove.com

{
    "type": "entry",
    "published": "2026-08-14 09:20-0700",
    "url": "https://gregorlove.com/2026/08/my-belated-html-day/",
    "category": [
        "HTMLday",
        "CSS",
        "Blaugust2026",
        "Blaugust",
        "indieweb"
    ],
    "syndication": [
        "https://bsky.app/profile/gregorlove.com/post/3mt2kyvhprk2b"
    ],
    "content": {
        "text": "My belated HTML Day contribution: a helpful little bit of CSS for publishing your meows: cat.css",
        "html": "<p>My belated <a href=\"https://indieweb.org/HTML_Day\">HTML Day</a> contribution: a <i>helpful</i> little bit of CSS for publishing your meows: <a href=\"https://gregorlove.com/lab/cat-css.php\">cat.css</a></p>"
    },
    "author": {
        "type": "card",
        "name": "gRegor Morrill",
        "url": "https://gregorlove.com/",
        "photo": "https://gregorlove.com/site/assets/files/6268/profile-2021-square.300x0.jpg"
    },
    "post-type": "note",
    "_id": "49241979",
    "_source": "95",
    "_is_read": false
}