zaki's wall

zaki

shellbyte

8 April at 16:45

Like 2 May at 11:13

zaki

need someone to smith me,,

Like 1 29 April at 21:04

zaki

oh woah this is still a thing

Like 29 April at 21:02

zaki

tillian 🇰🇿🦊:anarchism: ACAB

14 April at 18:58

some dark development about nicole the fediverse chick spam waves

some people on reddit and fedi managed to find out who "Nicole the Fediverse Chick" was, and apparently the entire spamming campaign is orchestrated by the stalker of the person in the images.

they're using pictures and video of someone they stalked and pretending to be Nicole.

https://www.reddit.com/r/fediverse/comments/1jdg2mt/anyone_know_what_this_is/

Like 14 April at 19:25

zaki

Tay 🧛‍♀️ :neobot_cute: :neocat_melt_blush: 🌸

1 April at 18:25

how widely are [links in cw](https://example.com) supported?

Anonymous poll

Poll

works on my instance

24

0%

does not work on my instance

21

0%

0 people voted.

Like 1 April at 18:52

zaki

Chumchum Tumtum

29 March at 17:23

Sensitive content

I really feel like fedi is disproportionately autistic with comparison to other social media platforms, but I haven't touched any other major ones in years, nor do I have the necessary data, so I don't really know. Poll: do you identify as autistic (not necessarily officially diagnosed, etc, not trying to exclude the experiences of those without necessary medical access or subclinical presentation)?

Anonymous poll

Poll

autism

93

64.1%

notism

52

35.9%

145 people voted.
Voting ended 28 April at 17:40.

Like 30 March at 7:10

zaki

fiona :loading:

25 March at 17:33 on post pixelfed instance admins: Please update pixelfed to v0.12.5 asap. The version contains fixes for serious...

Pixelfed before v0.12.5 has a vulnerability where it could leak your private posts, regardless of whether you are a Pixelfed user or not.
Admins should update ASAP.

When following someone from a different server on the Fediverse, the remote server decides whether you are allowed to do that. This enables features like locked accounts. Due to an implementation mistake, Pixelfed ignores this and allows anyone to follow even private accounts on other servers. If a legitimate user from a Pixelfed instance follows you on your locked account, anyone on that Pixelfed instance can read your private posts.

I wrote a blog post about how I found the vulnerability, how disclosure coordination went and general ramblings about Fediverse safety:
https://fokus.cool/2025/03/25/pixelfed-vulnerability.html

#pixelfed #fediverse #activitypub

Pixelfed before v0.12.5 has a vulnerability where it could leak your private posts, regardless of whether you are a Pixelfed user or not.
Admins should update ASAP.

When following someone from a different server on the Fediverse, the remote server decides whether you are allowed to do that. This enables features like locked accounts. Due to an implementation mistake, Pixelfed ignores this and allows anyone to follow even private accounts on other servers. If a legitimate user from a Pixelfed instance...

Expand text...

Like 27 March at 5:22

zaki

shellbyte

25 March at 7:43

pls gib tips on buying maid dress (i am currently in japan)

Like 25 March at 8:12

zaki

sneexy

25 March at 3:19

merp

Like 25 March at 8:12

zaki

me lontini

21 March at 12:55

im smithing my reens rn. straight up smithereening it rn

Like 25 March at 8:12

zaki

Have I Been Pwned

19 March at 1:13

New sensitive breach: Lexipol had 672k email addresses breached last month by self-proclaimed "Puppygirl Hacker Polycule". Data included name, phone and MD5 or SHA-256 password hashes. 23% were already in @haveibeenpwned. Read more: https://www.them.us/story/puppygirl-hacker-polycule-leak