@fossham@twtpub.com I honestly think the most unique and interesting thing about doing this at all is that it is in fact inspired directly by Twtxt / Yarn.social itself – That is to say, I am confident I can do this in such a way as to be “truly decentralised”, no inter-networking like ActivityPub, no centraised forges like Github or Codeberg. You run your instance, I run mine, we just are able to collaborate. Think exchanging patches over Email, just without all the hard-to-learn ways to do that (enough though it’s not hard for some of us, but still).

@itsericwoodward@itsericwoodward.com Dropped you en Email 📧

I don’t believe in hell, but if the software you made or that you deploy sends emails to addresses not “validated” to belong to your clients, and then I get relentlessly spammed by messages to your clients wrongly coming to me. I hope that somehow something makes you find out you are a bad person.

@lyse@lyse.isobeef.org

How many tickets and merge requests did you get before moving to your own server?

Hm, these were probably some of the more active projects:

• https://github.com/vain/lariza/issues?q=is%3Aissue%20state%3Aclosed
  
• https://github.com/vain/pdfPres/issues?q=is%3Aissue%20state%3Aclosed
  
• https://github.com/vain/xiate/issues?q=is%3Aissue%20state%3Aclosed
  

So it’s not a ton of stuff and there are many “issues” I opened myself, but it’s certainly more than these days.

Haven’t used git send-email even once. I definitely have to look into that soon. Wanted to do that for several years. I typically upload the patch to my server and send a link via IRC.

git send-email is good for sending patches to a mailing list (because then the individual patches can be discussed easily), but since those are dying out as well, it loses its appeal. If you want to send patches to a single person, just sending the link to your repo is far easier. 🤔

@movq@www.uninformativ.de Finally, your software is just perfect and finished by now, no need to report non-existing bugs or send in code changes. :-) How many tickets and merge requests did you get before moving to your own server?

I have to admit that I use git format-patch so rarely, I always have to pull it up from my shell history. Haven’t used git send-email even once. I definitely have to look into that soon. Wanted to do that for several years. I typically upload the patch to my server and send a link via IRC.

Maybe I was just very unlucky, but my experience is that you can perfectly ignore people and their work who only do it for the “fame”. It’s almost always been from inferior quality to say the least.

@prologic@twtxt.net Hmmm, I have no idea how to solve that problem. 😅 Some jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.

I thought I had made that super easy, because you can just send me an email – no sign-up process, nothing. But that’s way too old-school, people don’t know how to use git format-patch (let alone git send-email) and they also don’t understand that they can just send me a link to their forked Git repo (which can be hosted anywhere). Git is super flexible and powerful, but those features are hardly ever used.

Maybe people even need some kind “reward”, or “fame”. Like those “achievements” that you can unlock on GitHub. (Something to put in their CV … ?)

@david@collantes.us heads up 👋 that verification code never reached you — outbound email was broken on my end (my mail relay was rejecting twtxt.net senders 🤦‍♂️). Fixed + deployed now 🥳 give the hosted feed another go, it’ll land this time 🤞

@balloon-fu-sen@tw.fus.f5.si Thank you for reaching out 👌 I had alraedy done so via Email too a few days back and she upgraded her Pod to yarnd/0.16.x 🎉

@david@daiwei.me Well… I can’t! becuase the email supplied was nobody@invalid or some shit™ 💩

anyway thank you to @prologic@twtxt.net for the email heads up to upgrade this pod! we SHOULD be on the latest version, if i did it right…

@GabesArcade@gabesarcade.com LOL You can Email me, hit me up on Signal, orc IRC. Take ya pick I’m around 😅

@GabesArcade@gabesarcade.com by asking me nicely 🤣 Which you just did! If you either provide me a desired username and password and secure medium to give this to you I can do that easily, or alternative a desired username and email address (never stored, only hashed), after which you can “Reset password”.

@rdlmda@rdlmda.me twtxt is like an email in a bottle. Just toss one every once in a while. Off topic, weechat is awesome, isn’t it?

When the client calls to check if I got the email he sent four minutes ago ⌘ Read more

The Future of Email
Article URL: https://www.fastmail.com/blog/the-future-of-email/

Comments URL: https://news.ycombinator.com/item?id=48502321

Points: 9

# Comments: 6 ⌘ Read more

Digital Sovereignty Becomes an Imperative as the US Reads Dutch Emails
Article URL: https://www.korte.co/2026/06/11/digital-sovereignty-becomes-an-imparative-as-the-us-reads-dutch-emails/

Comments URL: https://news.ycombinator.com/item?id=48500404

Points: 9

# Comments: 2 ⌘ Read more

Western Digital Promo Code: 15% Off
Get 15% off your first order at Western Digital when you register your email. ⌘ Read more

@lyse@lyse.isobeef.org Two emails. 😅 One person asking for the source code, and the author of wcwidth (the library I’m using) contacted me to provide some input. 👌

Rootshell: A new E2EE email service hosted in Iceland
Article URL: https://rootshell.is

Comments URL: https://news.ycombinator.com/item?id=48388253

Points: 8

# Comments: 4 ⌘ Read more

Please don’t spam people looking for employment. It’s just cruel
Earlier I posted in a “Who wants to be hired?” thread, looking for a place where I could apply my experience in hospitality, food tech and automation.

A couple hours later I received an email:

“Hi Ilia,

I saw your comment on the June Who’s Hiring thread. I build production-ready TypeScript and Python systems that integrate LLMs into real workflows, with particular focus on RAG, agent orchestration, and clear blah-blah-blah”

Come on.
I am a forced immigra … ⌘ Read more

@prologic@twtxt.net Ah, so that’s what “Bob” is. I saw that popping up in email notifications. 😅

Hands-On With Gemini Spark: I Gave It Access to My Life and It Friend-Zoned My Boyfriend
Google’s new AI agent combed through my emails, documents, and calendar to plan a birthday party and still didn’t clock the person most important to me. ⌘ Read more

Department of Labor Tells Employees to Report Anyone Prioritizing DEI
The email instructs workers to report behavior that predates Donald Trump’s second inauguration. One employee tells WIRED it felt like a “reminder to narc on your coworkers.” ⌘ Read more

Show HN: Posthorn, self-hosted mail without the mail server
Introducing Posthorn, a self hosted email gateway. One docker container (or Go binary) between every self hosted app on your VPS and your transactional email provider. Set up Posthorn once, point your apps to it, done.

I was trying to deploy Ghost on a DigitalOcean droplet and found that DO and many different VPS services have started to block the default SMTP ports to try to combat the various types of abuse they get. To actually configure my app, I had to hack to … ⌘ Read more

‘Creepy’ Listening Tool for Targeted Ads Didn’t Actually Work, FTC Says
Three firms will pay nearly $1 million for selling “Active Listening” technology that they claimed tapped people’s phones for advertising. The FTC alleges the “tech” was just pricey email lists. ⌘ Read more

Google’s Response to OpenClaw’s 24/7 AI Agent
Google’s always-running, data-hungry AI agent is designed to spend your money and send your emails. ⌘ Read more

HostGator Promo Codes: 76% Off for April 2026
Unlock massive savings on HostGator web hosting, WordPress, VPS, and business email plans with our exclusive HostGator promo codes and deals. ⌘ Read more

xAI Adds 19 New Gas Turbines Despite Ongoing Lawsuit
Emails show that Elon Musk’s company is expanding its use of portable gas-fired power at its Colossus 2 site as a fight over air quality continues. ⌘ Read more

Western Digital Promo Code: 15% Off
Get 15% off your first order at Western Digital when you register your email. ⌘ Read more

Musk vs. Altman Evidence Shows What Microsoft Executives Thought of OpenAI
Leaders at the tech giant were skeptical of OpenAI—but wary of pushing it into the arms of Amazon, according to emails dating back to 2018. ⌘ Read more

DOGE’s Ethan Shaotran Is Now Running a Defense Tech Startup
In an email viewed by WIRED, Shaotran describes Blitz Industries as “a defense company backed by big names.” ⌘ Read more

Use Gmail’s ‘Manage Subscriptions’ Tool to Cut Down on Inbox Clutter
Find and remove newsletter subscriptions more easily using Gmail’s built-in tools for organizing bulk emails. ⌘ Read more

The auDA, and some 3rd-party identify service and my Registrar are a joke!

WOW! I just had to share this little story I ran into today.

I tried to register a .AU Domain the other day, only for it to instantly fail.

I emailed support, which took several days to respond, only for them to respond by saying (paraphased):

We’re sorry, but the identify checks failed. The 3rd-aprty service doesn’t tell us why, But, please make sure that the ID you used matches the Full Name, including any Middle name(s).

I used my Passport number. Which of course has my First, Middle and Last Name.

I can only assume at this point that the checks failed on the missing “Middle name”. Why? Because the Registrar I use has a database and user interface for “contacts” that only have support for First name and Last name. NO Middle Name.

🤦‍♂️ This is basically stupid at this point. Systems cannot be trusted at the most fundamental level, no matter how good they are.

Until we figure out how to build a system that allows an individual to prove to another entity that they are who they say they are without a shred of doubt (i.e: cryptographically), we’re stuffed.

There is literally nothing I can do in this case. The auDA are at fault. The 3rd-party identify service (unknown) are at fault. The registrar are at fault. Hell, even the Passport office are at fault for even bothering to or requiring a Middle name.

How has “identity” come to this?

When I realize I accidentally mass-emailed 50,000 users ⌘ Read more

Worker recalls seeing gigantic 10-inch scorpions in Florida
Cryptozoologist Dr Karl Shuker recently received an intriguing email from a man with a fascinating story to tell. Tales of gargantuan scorpions, both … ⌘ Read more

My hoster broke UDP, so DNS is broken as well and that takes a lot of things with it. No more email for me, I guess.

Let’s hope they’ll fix it soon.

I recently got an email with this byte sequence:

\xf0\x9f\x8e\x81\xf0\x9f\x95\xaf\xef\xb8\x8f

That’s U+1F381, U+1F56F, U+FE0F. The last one is a “variation selector”:

https://unicodeplus.com/U+FE0F

My toolkit renders this incorrectly – and so do tmux and GNU screen.

Unicode ain’t easy. 🥴

@shinyoukai@neko.laidback.moe No email has arrived here? 🤔

@movq@www.uninformativ.de What’s Email?! 😂

Vacation: Doing crazy things like C on DOS, lots of Rust, bare-metal assembly code, everything is fine.

Back at work: How the fuck do I move an email in this web mail program? Am I stupid? 😮‍💨

PEP 819: JSON Package Metadata
This PEP proposes introducing JSON encoded core metadata and wheel file format metadata files in Python packages. Python package metadata (“core metadata”) was first defined in PEP 241 to use RFC 822 email headers to encode information about packages. This was reasonable in 2001; email messages were the only widely used, standardized text format that had a parser in the standard library. However, issues with handling different encodings, differing handling of line breaks, and other differences between i … ⌘ Read more

@prologic@twtxt.net I’ll create one manually and send you the creds so you can change them as soon as you log in (my instance isn’t set up to send emails). Not sure how you could get access to logs, not even my admin account has that on the admin panel. I just snoop trough the /var/log/* when needed.

Boleto falso do Simples Nacional em um email cujo rementente aparenta ser @ santarem. pa . gov . br … está tendo. #fraude

**I Could Change Anyone’s Email Preferences — Without Logging In ** ⌘ Read more

@movq@www.uninformativ.de what do you use? Is it plus-aliased emails? I am curious to know how others are accomplishing this. I am currently using the “Hide my Email” feature, from iCloud.

@prologic@twtxt.net FWIW, I love the idea and I do the same with my email domains. It’s the most effective way to fight spam, IMO. 🥳

Hmm anyone got a contact detail for Andrew? @eldersnake@we.loveprivacy.club – The emails/contacts I have have all bounced 😭

@bender@twtxt.net Hmm anyone got a contact detail for Andrew? @eldersnake@we.loveprivacy.club – The emails/contacts I have have all bounced 😭

I’m building a service that lets you:

create and manage disposable, brandable email aliases so you can track leaks, forward important messages, and keep your real inbox clean.

I’ve just finishing building it for the most part, and have cut a v0.1.0 release. It’s currently closed source (to be decided later) and now open to beta testers. cc @bender@twtxt.net 🙏 I fully intend to monetize and offer this as a paid service in teh coming weeks/months, but beta/invite-only testers and early adopters/users first 🤟

Cool. I think I’ve improved this abit. Update going out shortly… Also added optional support for displaying gravatar(s) if you supply your email address (optional of course).

“The $10,000 Handlebars Hack: How Email Templates Led to Server Takeover”

Image

While studying advanced template injection techniques, I came across one of the most fascinating bug bounty stories I’ve ever encountere … ⌘ Read more

Would-be drivers to be encouraged to donate blood
Driving licence applicants will get an email prompt encouraging them to become regular donors amid low NHS blood stocks. ⌘ Read more

“detect-fash” Feature Developed (and Rejected) for Systemd
“A utility to detect problematic software and configurations,” such as Omarchy Linux, Hyprland, & Ladybird, was developed by an account with a Russian Military email address. ⌘ Read more

Account Take Over | P1 — Critical

Image

It started off like any other day until I got an unexpected email — an invite to a private bug bounty program. Curious, I jumped in. The…

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/account-take-over-p1-critical-5468ce8218b9?sour … ⌘ Read more

The good thing about having a tablet now and spending time with it instead of my laptop the last few days is that I finally brought down my reading list in Miniflux a lot. I also answered emails and checked a few other tasks off my (mental) to-do list. ⌘ Read more

@movq@www.uninformativ.de I am betting he will not. The letter was not focused, nor used, politician’s “lingo”. If it was sent via email then it will be even easier to dismiss. I wish I was not such a cynic! 😩

I keep getting this email occadionally:

Your iCloud storage is almost full

Now for various reasons, I don’t want my children to be using iCloud to store data, files, photos or any of the sort. They’re free to use iMessages, and other Apple services like the App Store, etc, but not storage.

So I’ve set about blocking iCloud Storage API(s) via AdGuard Home tonight as well as ensuring that my local network (client users) cannot bypass DNS policies and get out other sneaky ways, because some applications will just use other DNS servers, or DOH or DOT.

Optus email mishap left department in dark about triple-0 outage
The telco operator sent two emails about its outage, which understated its extent, to a departmental email address that had been changed a week earlier. ⌘ Read more

My Email to Tim Cook
Comments ⌘ Read more

Phishing falando que é do Registro BR falando preu pagar mais de mil reais pra renovar um domínio .com … e o anexo é …suspeito.

Image

nmail: Terminal-based email client for Linux and macOS
Comments ⌘ Read more

My Recon Automation Found an Email Confirmation Bypass

Image

How a simple parameter led to a complete authentication bypass

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/my-recon-automation-found-an-email-confirmation-byp … ⌘ Read more

Self-Hosting Email Like It’s 1984
Comments ⌘ Read more

edbrowse is like a Swiss Army Knife-it can do http, gopher, irc, email, and JS. The issue is it’s slower with JS enabled.

Earlier this year, I used Purelymail until I switched back to a self-hosted email server. Today, I found out that Purelymail was sold shortly after I closed my account due to health reasons. The new owner has pledged to continue the service in the same spirit as its founder, who always provided excellent support when I needed it. My reason for switching wasn’t due to any dissatisfaction with Purelymail; I simply wanted more control and to host my data in Europe again. I wish Purelymail all the best and hope it conti … ⌘ Read more

The emails that reveal how Optus downplayed the Triple Zero disaster
It began with what should have been a routine upgrade but the result was catastrophic. Within hours, three people were dead. ⌘ Read more

@prologic@twtxt.net I’m doing that now as well, but I don’t think this is a good solution. This is going to hurt “self-hosting” in the long run: I cannot afford true self-hosting where I actually do host everything here at home – instead, I must use a cloud provider / VPS for that. It is only a matter of time until my provider starts doing AI shit as well (or rather, the customers do it) and then what? I get blocked, e.g. I can’t send email to (some) people anymore. This is already bad and it’s going to get worse.

@prologic@twtxt.net i’ll email you!

Serasa Experian é uma empresa tão pilantra mas tão pilantra que agora estão descaradamente fazendo spam a partir de emails coletados do registro brasileiro de domínios (Registro.BR) é muito irritante.

Unless your Terms of use update email looks and reads the same as the one I got yesterday from mastodon.social, I don’t wanna know about it, nor do I agree to it.

@movq@www.uninformativ.de > That guy over there in the corner…

I’m literally sitting in a corner chuckles. I rarely get any emails nowadays. But if I do and it is not plain-text, then my Mutt gets to bark at it and I, just… won’t read it. 🤷🏽‍♂️

@movq@www.uninformativ.de make that 4 people! i use plain text when i can because this page convinced me lmfao

@lyse@lyse.isobeef.org … because you, me, and that guy over there in the corner are the only three people left using plain-text email. 🫤 (And probably Stallman.)

**Abuse-ception: How I Turned the Abuse Report Feature Into a Mass Email Spammer **

Image

Hey there!😁

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/abuse-ception-how-i-turned-the- … ⌘ Read more

$7,500 Bug: Exposing Any HackerOne User’s Email via Private Program Invite

Image

How One GraphQL Query Turned Private Invites into Public Data Leaks

[Continue reading on InfoSec Write-ups »](https://infosecwrite … ⌘ Read more

How a Welcome Email Can Be Used for Malicious Redirection

Image

Free Article Link: Click for free!

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-a-welcome-email-can-be-used-for-malicious-redirection-fd833ec71550? … ⌘ Read more

How to fix email encryption
Comments ⌘ Read more

**Header Injection to Hero: How I Hijacked Emails and Made the Server Sing **

Image

Hey there!😁

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/header-injection-to-hero-how-i-hijacked-emails-an … ⌘ Read more

**Silent but Deadly: How Blind XSS in Email Notifications Gave Me Root Alerts **

Image

Hey there!😁

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/silent-but-deadly-how-blind-xss-in-email … ⌘ Read more

Where is “Hide My Email” on iPhone & iPad?
The “Hide My Email” feature on iPhone is incredibly useful, allowing you to create random unique email addresses that forward to your real email address inbox. This feature can help protect your privacy by allowing you to sign up for apps or services without sharing your real email address, while enhancing security from phishing attempts, … Read More ⌘ Read more

Where is “Hide My Email” on iPhone & iPad?
The “Hide My Email” feature on iPhone is incredibly useful, allowing you to create random unique email addresses that forward to your real email address inbox. This feature can help protect your privacy by allowing you to sign up for apps or services without sharing your real email address, while enhancing security from phishing attempts, … Read More ⌘ Read more

Crossing the U.S. Border? Here’s How to Protect Yourself
Nikita Mazurov ,    -  The Intercept

_Stephan: I live up near the Canadian border and a lot of people I know go back and forth between the U.S. and Canada, and a number own properties in Canada. Today I got a very disturbing email from a reader who had been up in Canada and drove back down with a Canadian friend who has family in Burlington. When they got to the border, the border guards, who were very confrontatio … ⌘ Read more

VPS troubles and the weekend
This weekend I went to the cottage with P on Friday. I hoped I would
have a nice weekend reading in front of the wood stove, but I had also
planned to spend at least a few hours trying to configure Maddy as the
new mail server for hack.org et al.

Then the web server I moved to the new VPS died. Again. I connected to
the VNC console and, like before, the Linux kernel couldn’t find its
root disk. A simple:

# mount /dev/vda2 /sysroot; exit

in the emergency shell solved thi … ⌘ Read more

@prologic@twtxt.net I will pull the email. The year is about right.

According to a very old email one of my more personal family domains was registered in 2013 making it 12 years old, so I was closed 🤣 my public facing one is much much older 🤣

Unlimited Emails: A Bug That Let Me Spam Anyone =>$250

Image

Free Article Link: Click for free!

Continue reading on InfoSec Write-ups » ⌘ Read more

$100 Bounty: How a Spoofed Email Could Change Any Username on HackerOne

Image

A simple email spoofing trick could let anyone hijack your HackerOne username and profile link

[Continue reading on InfoSec Write-ups »] … ⌘ Read more

Stored HTML Injection — Email Invite Manipulation

Image

Introduction

Continue reading on InfoSec Write-ups » ⌘ Read more

@ About the URL, since it no longer used for hashing there might be no need to change it. I agree that we keep all the parts that already are out there for the most parts. Instead of a contact field you could also just use links like: link = Email mailto:user@example.dk or link = Signal https://signal.me/sthF4raI5Lg_ybpJwB1sOptDla4oU7p[...]

@andros@twtxt.andros.dev Thanks for consolidating a lot of good ideas. Especially how you have deiced to just extend the mention syntax for location-based treads. This might even be backward compatible with older (pre-yarn) clients.
What about using Z for UTC +00:00- is that allowed in your specs?
Regarding url = I would suggest to only allow one and the maybe add url_old = or url_alt = !?
I’m still not a fan of a DM feature, even thou it helps that i have now been split out into a separate feed file. Instead if would suggest a contact = field for where people can put an email or other id/link for an established chat protocol like signal or matrix.

The Ultimate Guide to Email Input Field Vulnerability Testing

Image

Real-world methods and payloads for testing email field security

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/the-ultimate-guide-to-email- … ⌘ Read more

$3750 Bounty: Account Creation with Invalid Email Addresses

Image

How a Simple Email Validation Flaw Earned a $3,750 Bounty

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/3750-bounty-account-creation-with-invalid-em … ⌘ Read more

I also fundamentally do not believe in the notion that Twtxt should be readable and writable by humans. We’ve thrown this “argument” around in support of some of the proposals, and I just don’t buy it (sorry). As an analogy, nobody writes Email by hand and transmits them to mail servers vai SMTP by hand. We use tools to do this. Twtxt/Yarn should be the same IMO.

**WooCommerce Users Beware: Fake Patch Phishing Campaign Unleashes Site Backdoors **

Image

Imagine this: you’re running your WooCommerce store, sipping coffee ☕, and an urgent email lands in your inbox. It scr … ⌘ Read more

Just like we don’t write emails by hand anymore (See: #a3adoka), we don’t manually write Twts or update our twtxt.txt feeds. Instead, we use modern Twtxt clients that conform to the specifications at Twtxt.dev for a seamless, automated experience. #Twtxt #Twt #UserExperience

Nobody writes emails by hand using RFC 5322 anymore, nor do we manually send them through telnet and SMTP commands. The days of crafting emails in raw format and dialing into servers are long gone. Modern email clients and services handle it all seamlessly in the background, making email easier than ever to send and receive—without needing to understand the protocols or formats behind it! #Email #SMTP #RFC #Automation

Hidden Tricks to Spot Phishing Emails Before They Trick You!

Image

Phishing emails are like traps set by cybercriminals to trick you into sharing personal details, clicking dangerous links, or downloading…

[Continue reading on InfoSec Write-ups … ⌘ Read more

GitHub potential leaking of private emails and Hacker One
Comments ⌘ Read more

Email Verification Bypass during Account Creation | Insecure Design ⌘ Read more

@bender@twtxt.net I use it. It’s not the feature I use the most in the fediverse, but I communicate this way with several friends. For example, it’s the main way I talk to the original creator of the twtxt-el repository, the way people greet me for the first time or the way they notify me of some bugs in the software I maintain. I can even tell you that it’s the main way I talk to some maintainers of the Emacs community. If there are any of you reading my words, speak up!
Why not have the same? There are things I want to say to @prologic@twtxt.net in private, why should I have to send him an email or private IRC? Or an public twt.
Of course, here’s a topic we’ve already talked about: what is twtxt for you? For me it will always be a social network, in microblogging format, but an asynchronous way of communicating. And having a tool to control visibility is basic 😄
I look forward to hearing from you @eapl.me@eapl.me !