Anyone run a Mastodon serve rI can have an account on to help test the Twtxt <-> Activity Pub bridge? 🙏

@prologic@twtxt.net we are not going to get far by blaming the other side. 😅😂

** SQL Injection: Listing Database Contents on Non-Oracle Databases**

Image

UNION-based SQL injection used to enumerate database tables, extract credential columns, dump usernames and passwords, and log in as the…

[Continue reading on I … ⌘ Read more

I need some test Activity Pub / Mastodon users to test with 🤔

WOW LOL

fetch https://weaknotes.com/users/david: status 500 Internal Server Error

First real test failed trying to lookup / follow @david@weaknotes.com

For those curious, the new Twtxt <-> ActivityPub bridge I’m building (bidirectional) simply requires three things:

1. You register your Twtxt feed to the bridge: https://bridge.twtxt.net
   
2. You verify that you in fact own/control the feed by putting the verification code somewhere on/in your feed (doesn’t matter where or how)
   
3. You proxy/forward requests for /.well-known/webfinger to the Bridge bridge.twtxt.net.
   

I’m still testing through and ironing out bugs 🐛 Please be patient! 🙏

Enormous prehistoric ‘hell pigs’ munched on bones and flesh alike
Prehistoric North America was home to giant pigs that stood as tall as a human, even when on four legs. According to new findings, a species of enormo… ⌘ Read more

@lyse@lyse.isobeef.org LOL, that one was too good to pass, right? I am glad you are enjoying my little notes in a bottle!

Man in critical condition after eating a whole burger without chewing
The latest candidate for the Darwin Awards decided to swallow the burger in its entirety ‘for a joke’. According to reports, the bizarre incident happ… ⌘ Read more

When I finally understand why no one wanted to take over the module in my story ⌘ Read more

@lyse@lyse.isobeef.org then it was, most likely, space debris—which, sadly, make up for 98% of all space anomalies these days. And thought they have applied to the Grant Wishes Council, they are yet to be approved. Keep playing, though. 😅

@lyse@lyse.isobeef.org I hope you were prepared to cram those wishes in 3 seconds. I am always prepared for that eventuality. You don’t have to mutter a word, nor clearly think much about it—that is, you don’t need to think your wish(es) word-by-word. As long as you stay within the wish(es) main goal(s), you should be fine, and it/they shall be granted, of course.

@kiwu@twtxt.net is it almost over, or just got closer to the next one? 🧩

Privilege Escalation From Guest To Admin ⌘ Read more

How to Find P1 Bugs using Google in your Target — (Part-2)

Image

Earn rewards with this simple method.

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-to-find-p1-bugs-using-google-in-your-target-part-2-d37a9bb0b2e7?sour … ⌘ Read more

When the database takes 10 minutes to respond ⌘ Read more

Stack Overflow Co-Founder to DHH: You Should be Afraid of Me
Jeff Atwood (co-founder of Stack Overflow & Discourse), appears to make a public threat against Omarchy & Ruby on Rails founder, DHH. ⌘ Read more

4chan’s Lawyer Talks to Lunduke
Preston Byrne, the attorney representing both 4chan and Kiwi Farms, talks with Lunduke about Ofcom and the United Kingdom’s censorship campaign against Americans. ⌘ Read more

@movq@www.uninformativ.de Haha, you were spot on! It took me a bit to figure this out on my own. I’m actually very surprised to have gotten this wrong. Oh well.

No, I was using an empty hash URL when the feed didn’t specify a url metadata. Now I’m correctly falling back to the feed URL.

@lyse@lyse.isobeef.org Yeah, I noticed that too. I haven’t double-checked my code, though. Maybe it has something to do with selecting the correct URL? I mean, these feeds don’t have any # url = fields, so maybe that’s it?

This looks like a botnet, to be honest. The IPs are all over the place. Ethopia, Brazil, Kenya, Lebanon, Netherlands, … I mean, that’s the logical thing to do, isn’t it? Do your web crawling on infected PCs. Nobody will block those, because those are the same IP ranges as legitimate requests. And obviously you don’t have to pay for computing time.

… and they all send invalid HTTP requests, all answered with HTTP 400 … How silly.

When I break my current project right before switching to a new one ⌘ Read more

Reacher out to Mike on BlueSky.

Ukinami Yuzuha asked to come inside (kukiyuusha) [zenless zone zero] ⌘ Read more

PEP 814: Add frozendict built-in type
A new public immutable type frozendict is added to the builtins module. ⌘ Read more

@lyse@lyse.isobeef.org nginx allows logging per user, via using defined variables on configuration. Not sure, though, if a Tilde would be willing to go to those “extremes”.

New mango variety to hit shelves after years of development
The Ruby Gold mango has been produced in commercial quantities for the first time and sellers say they are sure it will be a winner with consumers. ⌘ Read more

@bender@twtxt.net Sounds about right.

I had a brainfart yesterday, though. For whatever reason I thought of subdomains, which are modeled with server entries in nginx. So, each could define its own access_log location. However, there are no subdomains in place! Searching around, I didn’t find any solution to give each user their own access log file.

One way would be a cronjob, aeh, systemd timer as I learned the other day, that greps the main access log and writes all user access log files with only the relevant stuff.

@lyse@lyse.isobeef.org was it? Hmm, am I back to square one? 😅 Contacting one tilde could be a step ahead, but there are so many…!

Ignite Realtime Blog: First release candidate of Smack 4.5 published
The Smack developers are happy to announce the availability the first release candidate (RC) of Smack 4.5.0.

The upcoming Smack 4.5 release contains many bug fixes and improvements. Please consider testing this release candidate in your integration stages and report back any issues you may found. The more people are actively testing release candidates, the less issues will remain in the actual release.

Smac … ⌘ Read more

@bender@twtxt.net Wasn’t that transferred to somebody else?

My goodness, a new level of stupidity.

The bots are now doing things like this:

GET http://uninformativ.de/projects/lariza/feednotify/datenstrahler/slinp/countty HTTP/1.1

1. That URL does not exist.
   
2. By including http://uninformativ.de in that request, this instructs the webserver to do an HTTP proxy request. Of course, this isn’t allowed on my webserver (and shouldn’t by allowed on any normal webserver), resulting in HTTP 400. And even if it were, the target would be the exact same server, making a proxy request unnecessary.
   

And of course, it’s not just 50 hits like this or 100 or 1’000 or 10’000. No, it’s over 150’000 in the last 2 days. All from vastly different IP ranges of different cloud hosters.

This almost looks like a DDoS attack, but it’s just completely stupid. This feels more like some idiot vibe coded a crawler.

I used Gemini (the Google AI) twice at work today, asking about Google Workspace configuration and Google Cloud CLI usage (because we use those a lot). You’d think that it’d be well-suited for those topics. It answered very confidently, yet completely wrong. Just wrong. Made-up CLI arguments, whatever. It took me a while to notice, though, because it’s so convincing and, well, you implicitly and subconsciously trust the results of the Google AI when asking about Google topics, don’t you?

Will it get better over time? Maybe. But what I really want is this:

• Good, well-structured, easy-to-read, proper documentation. Google isn’t doing too bad in this regard, actually, it’s just that they have so much stuff that it’s hard to find what you’re looking for. Hence …
  
• … I want a good search function. Just give me a good fuzzy search for your docs. That’s it.
  

I just don’t have the time or energy to constantly second-guess this stuff. Give me something reliable. Something that is designed to do the right thing, not toy around with probabilities. “AI for everything” is just the wrong approach.

@lyse@lyse.isobeef.org Well, they say you have to build up stocks, don’t they? 😅

The font is fiamf3 (scaled up 2x, it would be too small when printed). It’s the same one that I use in my terminal and the status bars. 😃

I spent a few mins on teh tilde website, and for the life of me I can’t find a way to contact anyone responsible/accountable for this wonderful little service 🤣

Is it worth me reaching out to the operator and helping build some solution for their userbase to detect followers? 🧐

@movq@www.uninformativ.de Wow, that’s a hell lot of food! If it doesn’t spoil, it’s easily enough for the rest of your life and all your neighbors and surrounding cities, probably more. :-D

That’s a great font. I like it. It just suits the print style incredibly well. No offence, to the absolute contrary, I would not have thought that you actually designed that. It looks just so right. Hats off! :-)

@movq@www.uninformativ.de Have we reached peak enshittification yet?

YouTube is completely broken for me for a week or more. The player doesn’t even load anymore. Trying to limit the search results to real videos doesn’t do shit, etc. It’s useless. But downloading the videos with yt-dlp still works like a dream.

It is harder to regain ownership of an IRC channel than crossing the Mexico/US border. 😅

@movq@www.uninformativ.de Actually, @threatcat@tilde.club popped up in my own access log first. That’s how I discovered the feed. :-) So I figured that this feed author actually sees my reply. The hope is that with the next mention of my feed in threatcat’s feed, the other tilde users, who are following threatcat, are then also informed of my existence. :-)

I don’t know how tilde.club is set up. But it should be relatively easy to give all users access to their nginx access logs. Not sure if somebody already requested that or not. But I’d encourage tilde users to ask for that. Maybe also just for twtxt.txt and/or in a custom, reduced log format.

Lol, YouTube supports increasing the playback speed, but when you want to go to 4x, they want you to pay extra:

Image

DHH Talks to Lunduke
David Heinemeier Hansson (aka “DHH”, the creator of Ruby on Rails & Omarchy Linux), talks with Lunduke about Linux “selling out”, what a “distro” is, & the attacks from activists within Open Source. ⌘ Read more

@lyse@lyse.isobeef.org There’s a couple of new users on https://tilde.club, but since this is a shared host, I doubt that they have access to their access.log files. Hence they’ll never see followers, unless we notify them out of band. 🫤

Android shopping list apps disappointed me too many times, so I went back to writing these lists by hand a while ago.

Here’s what’s more fun: Write them in Vim and then print them on the dotmatrix printer. 🥳

And, because I can, I use my own font for that, i.e. ImageMagick renders an image file and then a little tool converts that to ESC/P so I can dump it to /dev/usb/lp0.

(I have so much scrap paper from mail spam lying around that I don’t feel too bad about this. All these sheets would go straight to the bin otherwise.)

Image

@lyse@lyse.isobeef.org Yeah, I’m glad I’m not the only one who didn’t get this right. 😅 You never had to configure a systemd timer? Lucky. 😅

ProcessOne: On Signal Protocol and Post-Quantum Ratchets

Image

Signal improved its protocol to prepare encrypted messaging for the quantum era.

They call the improvement “Triple Ratchet” (or SPQR = Signal Post-Quantum Ratchet).

[Signal Protocol and Post-Quantum Ratchets\
\
We are excited to announce a significant advancement in the security … ⌘ Read more

** Timber **

Image

Timber, I’m not gonna lie, I kinda hated you. At the same time I am surprised to find how gutted I am now … ⌘ Read more

Thousands of people in Ukraine engaged in efforts to stabilize power system – Zelensky ⌘ Read more

@bender@twtxt.net No plus-aliases, just aliases. The mailserver runs on my OpenBSB box and is managed using BundleWrap (we use that at work), so to create a new alias, I push a new BundleWrap config to the server.

@movq@www.uninformativ.de what do you use? Is it plus-aliased emails? I am curious to know how others are accomplishing this. I am currently using the “Hide my Email” feature, from iCloud.

Not too important, but an item on a wish list: add support for WebP? I had to convert the animated WebP to GIF.

Listening to #Bernstein’s #WestSideStory 🎵

I really like it, but (and?) it makes me very nostalgic. It reminds me of my father, he introduced it to me.

Zelenskyy vows to prevent Russia from selling oil to Hungary ⌘ Read more

Thank you for the encouragement and love and kind words, @lyse@lyse.isobeef.org @movq@www.uninformativ.de @bender@twtxt.net @doesnm@doesnm.p.psf.lt and others along the way I’m not sure of their feed uris 💕 I’ll keep at it, but for the time being I will keep my distance, mostly off IRC, because I don’t have the energy to spare in that kind of engagement (what//if the worst happens, it’s so draining). I need to remember what I ever did any of this for, it was back in ~2020 and I wanted really to build small interconnected communities that any non “tech savvy” person (more or less) could also benefit from ane enjoy. Even if there are aspects of the specs we’ve built/extended over time that aren’t “perfect”™, they’re “good enough”™ that they’ve last 5+ years (I believe this is 6 years running now). I want to spend a bit of time going back to why I did any of this in the the first place, and get a little micro-SaaS offering going (barely covering running costs) so encourage more folks to run pods, and thus twtxt feeds and grow the community ever so slightly. Other than that, I plan to get the specs “in order” to a point (with @movq@www.uninformativ.de and @lyse@lyse.isobeef.org’s help) where I hope they’ll stand the test of time – like SMTP.

Thank you all ! 🙏

Thank you for https://www.uninformativ.de/blog/postings/2025-11-09/0/POSTING-en.html, @movq@www.uninformativ.de! I never configured systemd timers, but I would have gotten it wrong, too. Good to know when I eventually stumble across that in the future. I’m still using cron. Yeah, its field order sucks and I always have to look it up (because I don’t deal with that all that often). Indeed, systemd’s order sounds more reasonable.

I should work on my client again and add some new features. Like adding a new feed directly in the client and not having to go to the config first. And showing a preview of a feed before actually adding it. Also, a search would be something to add. And finally combining my User-Agent analyzer with my subscription list to spot new feeds automatically.

UK military to help protect Belgium after drone incursions ⌘ Read more

Welcome to the party, @threatcat@tilde.club! I reckon it’s totally fine what you’re doing. Over time, message counts naturally drop anyway. :-D And this is fine, too.

@prologic@twtxt.net @movq@www.uninformativ.de Same here, I give each service a dedicated e-mail address. It’s very interesting to see how e-mail addresses are transferred to other actors. Luckily, this only happens rarely. But it does happen. In surprising ways.

Aliases not only help to fight spam, but are also a great way to specify filter rules to sort e-mails.

From Wooden Ducks to Digital Flags: My First v1t CTF OSINT Challenge ⌘ Read more

**How I Used AI to Become Someone Else (And Why Your Face Is No Longer Your Password) **

Image

Free Link 🎈

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-i-used-ai-to-b … ⌘ Read more

Time-of-check Time-of-use (TOCTOU) Race Condition Leads to Broken Authentication | Critical Finding ⌘ Read more

How I turned Membership into a Paycheck

Image

Hacking leaderboard on chess.com to get paid

Continue reading on InfoSec Write-ups » ⌘ Read more

Account Takeover via IDOR: From UserID to Full Access ⌘ Read more

Israel says Hamas violated ceasefire by refusing to return body of fallen IDF officer ⌘ Read more

China suspends ban on exports of gallium, germanium, antimony to U.S. ⌘ Read more

Zuckerberg, Chan shift bulk of philanthropy to science, focusing on AI and biology to curb disease ⌘ Read more

French lawmakers vote to tax American retirees who freely benefit from social security ⌘ Read more

PR to clean up some unwanted specs and cleanup some invalid/bad references. 🙏

@prologic@twtxt.net nothing to be sorry about. It gave me time to watch TV with kids! 🤭

Uncertainty for small-scale Tasmanian farmers over new food safety rules
The new regulations would bring Tasmania into line with national standards, but smaller growers are worried they will have to pay the same fees and meet the same auditing requirements as large-scale growers. ⌘ Read more

How to Brew Solar Powered Coffee

Image

There are many different methods for making coffee, some more energy-efficient than others. However, there are no coffee makers that … ⌘ Read more

Iran to cut water to Tehran, weigh evacuations as it faces worst drought in decades ⌘ Read more

UK looking at Denmark model to cut illegal migration ⌘ Read more

Somebody managed to piss @prologic@twtxt.net off, and it looks like he took twtxt.net down with it. Oh dear…

is there an etiquette to twtxt’ing? am i flooding?

Japan eyes nuclear subs after U.S. gives OK to S. Korea ⌘ Read more

@movq@www.uninformativ.de Yeah ! 👍 I’m trying to build my first micro-SaaS and get more lay-people to protect their own inboxes and identify 🤣 – Hopefully it all works out 💪

@lyse@lyse.isobeef.org It’s possible to run the validator locally (my blog generator scripts do that):

https://validator.w3.org/nu/about.html

That way you don’t forget. 🥳

@prologic@twtxt.net FWIW, I love the idea and I do the same with my email domains. It’s the most effective way to fight spam, IMO. 🥳

Double congrats, @thecanine@twtxt.net! \o/

I’m not a fan of the gemtext limits. This being only a single page (which probably doesn’t get updated a whole lot), the efforts of having two dedicates files are not all that big, or so I’d at least naively imagine.

I always recommend checking the W3C validator results, even though I’m very guilty of not doing that myself. It just doesn’t occur to me in the heat of the moment. I reckon if I were writing HTML on a more regular basis, I would pick up on making that a real habit. Anyway, your HTML being generated, you probably can’t address the findings, though. So, might not be even worth the time heading over to the validator.

From a privacy point of view, personally, I would definitely host the CSS myself. Other than that, nice link collection. :-)

She loves to go multiple rounds (jtveemo) [original] ⌘ Read more

WWII veteran declares winning the war ‘wasn’t worth it’ due to the state of the UK ⌘ Read more

@bender@twtxt.net to work through both https and gemini, the site is not written in HTML, but in Gemtext, automatically converted to HTML, when needed. Gemtext is nicely explained for example here: https://garden.bouncepaw.com/hypha/gemtext . In short, it is so limited, no line can be more than one thing, so no links in a list are possible, othar than doing it through something like this primitive workaround.

Poland to Train 400,000 Citizens in “Largest Military Readiness Drive” Since WWII ⌘ Read more

Zelenskyy vows to block Russian oil to Hungary — Hungary’s MOL says it can already go 80% non-Russian ⌘ Read more

These trees are usually laden with apples. This year they’re strangely bare
Across the the Blue Mountains, apple farmers are noticing less fruit this season. Some are wondering if it’s linked to varroa mite. ⌘ Read more

Also, did you intended for the page title to be simply “home”?

Just a small update, on my birthday (on the 5th), I accidentally deleted the main page, of my website, so I’m using that as an opportunity, to try something new, at https://thecanine.smol.pub or gemini://thecanine.smol.pub - depending on your preferred protocol.

Any feedback is welcome!

Jeremy Renner Accused of Threatening to Call ICE on Chinese Filmmaker Yi Zhou After Misconduct Allegations. Chinese filmmaker Yi Zhou claims Avengers star Jeremy Renner threatened to call ICE after she confronted him over alleged misconduct and sending explicit images ⌘ Read more

Thanks for sharing your thoughts! I’m going to bed, but I’ll have a closer read/think tomorrow 🤞

… and now I just read @bender@twtxt.net’s other post that said the Gemini text was a shortened version, so I might have criticized things that weren’t true for the full version. Okay, sorry, I’m out. (And I won’t play that game, either. Don’t send me another AI output, possibly tweaked to address my criticism. That is besides the point and not worth my time.)

@prologic@twtxt.net Let’s go through it one by one. Here’s a wall of text that took me over 1.5 hours to write.

This section says AI should not be treated as an authority. This is actually just what I said, except the AI phrased/framed it like it was a counter-argument.

The AI also said that users must develop “AI literacy”, again phrasing/framing it like a counter-argument. Well, that is also just what I said. I said you should treat AI output like a random blog and you should verify the sources, yadda yadda. That is “AI literacy”, isn’t it?

My text went one step further, though: I said that when you take this requirement of “AI literacy” into account, you basically end up with a fancy search engine, with extra overhead that costs time. The AI missed/ignored this in its reply.

Okay, so, the AI also said that you should use AI tools just for drafting and brainstorming. Granted, a very rough draft of something will probably be doable. But then you have to diligently verify every little detail of this draft – okay, fine, a draft is a draft, it’s fine if it contains errors. The thing is, though, that you really must do this verification. And I claim that many people will not do it, because AI outputs look sooooo convincing, they don’t feel like a draft that needs editing.

Can you, as an expert, still use an AI draft as a basis/foundation? Yeah, probably. But here’s the kicker: You did not create that draft. You were not involved in the “thought process” behind it. When you, a human being, make a draft, you often think something like: “Okay, I want to draw a picture of a landscape and there’s going to be a little house, but for now, I’ll just put in a rough sketch of the house and add the details later.” You are aware of what you left out. When the AI did the draft, you are not aware of what’s missing – even more so when every AI output already looks like a final product. For me, personally, this makes it much harder and slower to verify such a draft, and I mentioned this in my text.

You, @prologic@twtxt.net, also mentioned this in your car tyre example.

In my text, I gave two analogies: The gym analogy and the Google Translate analogy. Your car tyre example falls in the same category, but Gemini’s calculator example is different (and, again, gaslight-y, see below).

What I meant in my text: A person wants to be a programmer. To me, a programmer is a person who writes code, understands code, maintains code, writes documentation, and so on. In your example, a person who changes a car tyre would be a mechanic. Now, if you use AI to write the code and documentation for you, are you still a programmer? If you have no understanding of said code, are you a programmer? A person who does not know how to change a car tyre, is that still a mechanic?

No, you’re something else. You should not be hired as a programmer or a mechanic.

Yes, that is “skill evolution” – which is pretty much my point! But the AI framed it like a counter-argument. It didn’t understand my text.

(But what if that’s our future? What if all programming will look like that in some years? I claim: It’s not possible. If you don’t know how to program, then you don’t know how to read/understand code written by an AI. You are something else, but you’re not a programmer. It might be valid to be something else – but that wasn’t my point, my point was that you’re not a bloody programmer.)

Gemini’s calculator example is garbage, I think. Crunching numbers and doing mathematics (i.e., “complex problem-solving”) are two different things. Just because you now have a calculator, doesn’t mean it’ll free you up to do mathematical proofs or whatever.

What would have worked is this: Let’s say you’re an accountant and you sum up spendings. Without a calculator, this takes a lot of time and is error prone. But when you have one, you can work faster. But once again, there’s a little gaslight-y detail: A calculator is correct. Yes, it could have “bugs” (hello Intel FDIV), but its design actually properly calculates numbers. AI, on the other hand, does not understand a thing (our current AI, that is), it’s just a statistical model. So, this modified example (“accountant with a calculator”) would actually have to be phrased like this: Suppose there’s an accountant and you give her a magic box that spits out the correct result in, what, I don’t know, 70-90% of the time. The accountant couldn’t rely on this box now, could she? She’d either have to double-check everything or accept possibly wrong results. And that is how I feel like when I work with AI tools.

Gemini has no idea that its calculator example doesn’t make sense. It just spits out some generic “argument” that it picked up on some website.

The AI makes two points here. The first one, I might actually agree with (“bad bot behavior is not the fault of AI itself”).

The second point is, once again, gaslighting, because it is phrased/framed like a counter-argument. It implies that I said something which I didn’t. Like the AI, I said that you would have to adjust the copyright law! At the same time, the AI answer didn’t even question whether it’s okay to break the current law or not. It just said “lol yeah, change the laws”. (I wonder in what way the laws would have to be changed in the AI’s “opinion”, because some of these changes could kill some business opportunities – or the laws would have to have special AI clauses that only benefit the AI techbros. But I digress, that wasn’t part of Gemini’s answer.)

Except for one point, I don’t accept any of Gemini’s “criticism”. It didn’t pick up on lots of details, ignored arguments, and I can just instinctively tell that this thing does not understand anything it wrote (which is correct, it’s just a statistical model).

And it framed everything like a counter-argument, while actually repeating what I said. That’s gaslighting: When Alice says “the sky is blue” and Bob replies with “why do you say the sky is purple?!”

But it sure looks convincing, doesn’t it?

This took so much of my time. I won’t do this again. 😂

This brings a thought I had for a long time, why can’t we upload arbitrary files to a twtxt? If not an image, make it simply a link. I could have used such feature to upload the text.

@prologic@twtxt.net when I first “fed” the text to Gemini, I asked for a three paragraphs summary. It provided it. Then I asked to “elaborate on three areas: user experience, moral/political impact, and technical/legal concerns”. The reply to that is too long for a twtxt.

I then asked to counter the OP opinions—as in “how would you counter the author’s opinion?”. The reply was very long, but started like this:

“That’s an excellent question, as the post lays out some very strong, well-reasoned criticisms. Countering these points requires acknowledging the valid concerns while presenting a perspective focused on mitigation, responsible integration, and the unique benefits of AI.”

What followed was extensive, so I asked for a summary, which didn’t do justice to the wall of text that preceded it.

@prologic@twtxt.net hehehe, yeah, it isn’t mine neither. Most obscure TLDs are in small registrars. I like to stick to one register (even though when Google Domains ceased to exist I was forced to have two, as Cloudflare doesn’t support the .ONE TLD).

When I finish my sprint and now have to deal with unit tests ⌘ Read more

@bender@twtxt.net I think that’s where it sends the capture verification requests. It’s based on PoW, so it has to perform validation somehow. It actually looks pretty decent as far as a way to prevent spam/abuse of forms on the open web (e.g: Waitlist on SnipMail).

@prologic@twtxt.net never heard of it before. I wouldn’t call lightweight to anything that needs Docker to run, though. 😅