[XYZ] ww 🩶

https://xyzzy.link/users/ww

pronoun: she
pronombre: ella
homepage: https://effervescent.neocities.org

Public Key

npub16ygedl8xdtcpk5aq9p8xmj5af082hy0c6ra27n6lpm3vs2s85n7s3fsulz

NIP-05 Address

ww_at_xyzzy.link@momostr.pink

Profile Code

nprofile1qqsdzyvklnnx4uqm2wszsnnde2w5hn4tj8udp740fa0sackg9gr6flgprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntne4tq3

Publishing to

relay.momostr.pink

Author Public Key

npub16ygedl8xdtcpk5aq9p8xmj5af082hy0c6ra27n6lpm3vs2s85n7s3fsulz

Show more details

Last Notes

2026-09-11 05:43:40 UTC

- reply

huh, maybe it's the fedi bubble that convinced me that big tech is shoving their design decisions that everyone disagrees with down everyone's throat and taking away their precious 3.5mm jacks
looking at the local motorola website, it does seem like most of their low to midrange phones have the jack, but the higher end ones don't. of the two lowranger samsungs, 1 had the jack. the xiaomi redmi note 14 pro also has the jack. really makes you think 🤔

2026-09-11 05:31:53 UTC

- reply

but there's no 3.5mm jack?

2026-09-11 05:26:32 UTC

remember when cellphones had built-in fm radio but you had to use your headphones with it cause it used the cord as an antenna?

2026-09-04 19:49:37 UTC

- reply

like, i get it for b2b, kinda makes sense. if you're big enough or the company you're contracting is small enough, you might actually wanna talk to sales and see if they can get you in touch with the actual dev team, maybe give you a special offer, add some of the features you want to the backlog. but when it's a consumer product, the interaction is a formality, there's nothing useful that could possibly happen on that call.

2026-09-04 19:46:59 UTC

i don't get how companies whose sales model is "leave a number on our website and we'll call you" stay in business, especially when every single one of their competitors has online checkout with no human interaction required

2026-09-04 05:50:45 UTC

- reply

less disruption in life i suppose

2026-09-04 05:50:21 UTC

- reply

ohh..

2026-09-04 05:38:57 UTC

- reply

:KuromiConfused:

2026-09-03 15:52:49 UTC

did you know? due to gravity, getting dressed doesn’t disrupt your hair as much as getting undressed does.

2026-09-03 15:47:02 UTC

- reply

i don’t use links, no..

2026-09-03 15:05:09 UTC

i don't wanna use a browser that updates once in two years

2026-09-03 05:36:34 UTC

- reply

it's most likely cause eu's laws make compliance when operating overseas very expensive, i know it happens to other similar services

2026-09-03 05:06:59 UTC

person 1: service A stopped working for me
person 2: just switch to service B, it's better anyway
person 3: why do americans always assume that everyone lives in the usa? service B isn't available in most countries
service B: "you can sign up if: you live in the uk or eea"

2026-08-18 17:38:52 UTC

- reply

please don't do that cowinka

2026-08-18 17:20:45 UTC

- reply

probably depends on the warship or jet

2026-08-18 17:15:33 UTC

- reply

lmao
i mean, that'd be your own fault, i did suggest taking a warship or a fighter jet, but you didn't listen, now you have to face the consequences and you only have yourself to blame :KuromiMischevious:

2026-08-18 17:09:43 UTC

- reply

doubtful. i have no desire to do that, but even if i did, i'm pretty out of shape..

2026-08-18 17:06:09 UTC

- reply

you could probably beat a ww if you had a fighter jet that could cross the ocean, or a ship and a month of spare time

2026-08-18 17:03:18 UTC

- reply

no, more like a declaration of war

2026-08-18 17:01:38 UTC

- reply

play war games, win war prizes?

2026-08-18 17:00:20 UTC

- reply

play racing games, win racing prizes

2026-08-18 17:00:10 UTC

play free online games, win free online prizes

2026-06-11 14:45:49 UTC

- reply

yeah you have to change it each time you switch to another language, but like it's really hard in both akkoma fe and phanpy, i wish i could manually set the list of language displayed in the dropdown in the compose box
and yeah idk what about multilanguage posts

2026-06-11 13:57:00 UTC

i've been trying to use post language tags correctly but honestly the whole fedi ecosystem goes against it and it's also against the way humans talk and i think the real problem is mastodon and the fact that it trusts those stupid tags. it should detect the language instead. and its autotranslate feature should allow the user to translate anything into anything, with auto -> ui language being the default, but overridable setting.

2026-05-19 00:11:27 UTC

- reply

neither of those does much against players who can see through walls or something like that..

2026-05-19 00:09:20 UTC

- reply

yeah but i also don't wanna play against people who move 1.5 times as fast as i do

2026-05-19 00:07:32 UTC

- reply

makes as much sense to me as having a yubikey be a separate device—i don't want those games and kernel-level anticheat anywhere near my personal data and files (and also having unified hardware as a target for performance-critical software like a realtime videogame i think has some merit)

2026-05-19 00:02:43 UTC

- reply

oh, i thought the last few years would be like since 2020 ^^;
dunno, they're comfy tho, i'm not entirely sure that it's the kinda thing i'd expect creativity from. cause like, it serves a specific purpose, that's directly related to the shape of our hands.. vr controllers are different, cause they're made to control something else, but also kinda similar cause it's based around the human hand design..

2026-05-18 23:58:33 UTC

- reply

wdym by homogenization? why is it disappointing?

2026-05-08 20:05:21 UTC

- reply

do you go to a cafe to write it?

2026-05-04 13:28:23 UTC

hear the rumble...

2026-05-03 18:28:57 UTC

- reply

yeah, i feel like there's a sense of like. you should appreciate what you're given instead of trying to find nicer things or something.
and yeah cafes are expensive. sometimes people say the same about like pourover vs automatic drip coffee maker, but even then, pourover, usually an overpriced piece of plastic, is still much cheaper than electric drip coffee makers.. i guess ideally you'd get a nice kettle and a grinder in addition, which comes out to like $60 depending on where you are? and that can be expensive, but still, the difference is not that great, especially if you drink coffee every day and it's something you genuinely enjoy. (well and there's also a whole class of people that are like, "i'm a woman, i'm too weak to hand-grind coffee", which i don't really understand..)
and with cameras it's often about film photography being a snobbish thing to do, and like. well, there's lots of used cameras, and it takes some money, but also like.. most forms of art require some kinda materials? idk. i almost feel like it's the same as the type of person claiming that ai democratized art/music/etc.

2026-05-03 16:19:52 UTC

i feel like some people on fedi confuse having a hobby and enjoying something for snobbishness. like, oh, you think there's a reason to use a camera instead of taking pictures on a smartphone? you care about sound quality? you make your coffee yourself? you use anything other than the preinstalled windows on your computer? what a snob! stop immediately and never mention it to anyone ever! you're just showing off! real working class people can't afford to have fun in life.

2026-05-01 05:56:18 UTC

being a catgirl would kinda suck. imagine having cat ears, but human hair and tongue. how do you wash your hair? just accept that your ears fill up with water and shampoo each time you shower?

2026-04-25 17:05:42 UTC

- reply

whoa that sounds awesome

2026-04-25 17:01:50 UTC

- reply

m-maidcore?.. never heard of that genre..

2026-04-25 15:49:58 UTC

k where's my witch house playlist

2026-04-25 15:39:50 UTC

ww be like:
*picks up object*
*holds object*
*suddenly drops object*
"aaaa why did i drop object :KuromiFrustrated: "

2026-04-24 21:28:22 UTC

- reply

well there's just things that are more immediate threats to my survival than lead

2026-04-24 21:25:21 UTC

- reply

idk about that honestly
but like. i wanna get to the point where i have the time and energy to do politics like that. but lead pipes and such are gonna be pretty low on my list of priorities.

2026-04-24 21:15:35 UTC

- reply

yeah but i don't wanna go to jail so that isn't actionable information to me :)

2026-04-24 21:13:14 UTC

- reply

but like, what is there that i could do

2026-04-24 12:40:40 UTC

there's like a noticeable cultural difference between wife and me where she's used to that the government tries to make cities safe and generally stop people from dying, whereas to me it's like, the government kinda benefits from people dying young, but you'll genuinely live a longer and happier life if you stop caring about the safety of the things that surround you, cause it's not like knowing that everything around you causes cancer is actionable information anyway

2026-04-24 11:37:34 UTC

`𒋻 --zstd -cvf archive.𒋻.zst ./`
#note13qj…hh6k

2026-04-23 12:28:24 UTC

chat, human rights are slop
https://s3.us-east-2.wasabisys.com/xyzzylink-media/0173a67639282b431295ad082ba01c4cef41271e75fa51244708e1e49119c0bf.png

2026-04-14 11:57:49 UTC

hi fedi i'm looking for a european alternative to palantir pls boost

2026-04-14 06:06:42 UTC

- reply

when i used chrome, i'd always switch to guest mode for presenting, wish firefox had that

2026-04-10 23:34:00 UTC

i wonder if real impostors have impostor syndrome. as in, "i'm not actually good at assuming other people's identities. it's mostly just luck and everyone around me being stupid, so they don't notice. hell, they probably do notice, but play along cause that takes less effort. if they cared to expose me for impersonating their friends/clients/coworkers/etc, they would.."

2026-04-06 03:38:01 UTC

- reply

so making lockpicking a crime makes sense cause it pretty much proves malicious intent

2026-04-06 03:37:21 UTC

- reply

yeah, and that's part of why we use locks, to prevent accidents that are hard to judge like that

2026-04-06 03:34:51 UTC

- reply

but someone's gonna do it, the question is when. and if testing the system and reporting to the owner is as big of a crime as doing it anonymously and destroying the system, the law isn't working to improve the society.

2026-04-06 03:33:28 UTC

- reply

locks make the intent to trespass evident. cause like if i picked someone's lock while they're away, went inside, photographed their documents, and left, and the only evidence was a forensic examination of the lock, it would be very hard to prove that i didn't just pick their lock for fun.
well, if you accidentally opened an unlocked door thinking it's yours, that's not necessarily trespassing, and the line can be pretty blurry sometimes

2026-04-06 02:19:59 UTC

the argument that lockpicking shouldn't be a crime because.. it's not the lockpicker's fault that the lock isn't secure? is absolutely ridiculous lol
people should be able to pick their own locks and the locks of consenting adults, but there's no legitimate reason to do it against strangers

2026-04-05 07:45:45 UTC

- reply

> to hell with server centrism, just make them relays
that eliminates smtp as well :p
scuttlebutt was super confusing and unreliable ime. also not very good on smartphones or multi-device in general.
oh, i didn't realize nostr couldn't gossip, that sucks
> government interference
at least it's easily detectable with ct, also they're the only ones even trying to solve the problem (unless you count pgp wot i guess)
> some DNS stuff
yeah i think dane allows specifying one's own self-signed tls certificates for email. idk the details but people say the crypto in dnssec isn't very good, and not every tld supports it, so it's not a universal solution.
i mean, yeah, but idk. it's much easier to deal with otherwise, like in docker and such. or providing one distro-agnostic downloadable static binary per os+architecture without resorting to appimage. also caching/incremental builds are hard and all c/++/java/etc build systems are bad because of that. and i prefer js/ts anyway.

2026-04-05 07:15:22 UTC

- reply

> spools that can be implemented by arbitrary other protocol-relays
yeah, federation bound to domain names is conceptually incompatible with that—you have to be able to directly load the message origin's key. and with spools, you'd probably want user identity independent of server identity anyway. what do you think of nostr?
> should be able to send snailmail to their server and continue interacting via the responses
it would be nice, but it greatly expands the scope of the protocol, activitypub wasn't made for it. and when compared to xmpp, i think it fares better. nostr should be compatible with snailmail.
> That is considered out of scope, yeah
but then there's no sense in comparing it to tls pki, since trust in identity is its raison d'etre
i see! there's a lot of tradeoffs involved, and i guess personally i prefer those of golang, like static linking.

2026-04-05 06:59:06 UTC

- reply

> There's such a conspiracy?
https://lars.ingebrigtsen.no/2026/02/02/whats-up-with-all-those-equals-signs-anyway/
> Those are cute by the way.
:)
> Are they opaque?
the clients i've used had an option to view them, but it's buried. and i'm pretty sure most people don't know they're leaking timezone and maybe even hostname!
idk, i think i used to run claws mail with TZ=0 to switch to utc. apparently there's a hide_timezone option now, if you know to look for it. i don't know any other client that allows one to set that up, let alone makes it obvious that the timezone is shared? i mean, even git doesn't...
and like, the reason they have unfriendly defaults, at least in regards to the timezone, is probably that the standard recommends them: "The date and time-of-day SHOULD express local time." (https://www.rfc-editor.org/rfc/rfc5322#section-3.3)

2026-04-05 06:46:15 UTC

- reply

> The spec should actively acknowledge and support that.
agreed
> Active support for pluggable transports
how do you mean? with relays?
> major usability issues with infrastructure-disadvantaged areas
wdym? isn't that a client issue? those that seamlessly retry posts/favs/boosts don't need it to be constant/low-latency. and you can load your timeline and then go offline.
how does nncp solve the key sharing problem? like, without pki you pretty much have to use tofu..
what's wrong with golang?

2026-04-05 06:37:34 UTC

- reply

> it clearly doesn't need it
:KuromiFrustrated: :KuromiPout: :KuromiCry:
> tacked on hacks
yes!!
> a flaw of the clearnet
smtp is expressly a set of clearnet technologies!
> delegation
you mean mx records? those are part of the design, and also expressly clearnet-specific!
> simplified greatly by a proper transport layer
but how? i guess you have client keys in onion, no idea if you can use one for both a client and a server.
and then, like, which parts are worth keeping, and at which point is it no longer smtp?
- the session-oriented request-response protocol is weird and slow, especially over tor
- relatedly, there's no excuse for MAIL FROM and the From header being separate fields
- the envelope is weird, inefficient and kinda obscure in general
- everything tls and dns-related is irrelevant for our purposes
- there's the email format with headers and multipart body, with weird encodings. like, that's what recently caused a conspiracy theory about epstein emails lol. implementing that decoder apparently isn't straightforward, especially when working with emails generated by older clients.
- headers traditionally leak a lot of metadata while being opaque to the user. e. g. user-agent is unnecessary, date should be standardized to utc to avoid leaking timezone.
- most email clients are bad
i'd probably replace every one of those parts, but that's a different protocol..

2026-04-05 06:15:37 UTC

- reply

it's a tradeoff and i think it's one worth making. you can extend the spec for your overlay network. cause otherwise developers implementing it outside those will make the worst implementation possible with just enough features to technically pass and their end-users will suffer!
yeah but activitypub wants any server to be able to talk to any other, so you'd need a separate, onion/i2p-only network, which likely won't be worth spending time on
activitypub works well on smartphones and xmpp is hostile to them due to its connection orientedness
i2p and tor have plenty of that, unless you have a good way to share addresses out of band

2026-04-05 06:09:19 UTC

- reply

why? smtp doesn't support unicode, and its security is a disaster. you have dkim, spf and dane for sending, and when receiving, there's nothing you can really do to reliably protect from mitm. tls certificates aren't verified the way you'd want them to be. and all the subtle incompatibilities, there's just, no excuse.
and yeah you can use a subset with stricter requirements for your little ecosystem you have full control over, and fall back when talking to outsiders, but why would you?

2026-04-05 06:04:29 UTC

- reply

like, even despite all its problems, activitypub is just a better option for most usecases? it's easier to deploy, easier to secure, uses tls like normal people (without dane or a thousand fallbacks!), has reasonable identity with webfinger and http signatures. and you have the whole of https at your disposal. you can do mtls, compress your requests, etcetc.

2026-04-05 05:59:26 UTC

- reply

i think xmpp is a bad protocol in whichever role tbh. i'm not sure whether it's better or worse than smtp, but i think proliferating the use of either is a disservice to the humanity!

2026-04-05 05:46:56 UTC

i hate xmpp. i randomly received a message that my omemo keys got updated. a new key was added. it's the same key i've had in my desktop client from the beginning.
and there's a bunch of other keys, probably from when i was trying out different clients. whenever i try to delete them, they always come back. or, well. one of the clients actually hides them. another grays out. and the third shows them as still trusted, except the trusted switch is disabled, so i can't remove trust. i can long-tap and erase the key, but it comes back after a restart.

2026-03-31 18:02:55 UTC

- reply

unix lost its way

2026-03-31 05:36:39 UTC

- reply

more like ww-narrow ww :p

2026-03-31 05:23:59 UTC

- reply

seriously tho, when a manual says, "in its first form," it's about a command that's diametrically opposed to the unix way, and that's like half the commands

2026-03-31 05:21:49 UTC

tar is not unix way. rsync is not unix way. none of cpio, install, env, bash/zsh/etc, [[/test, tail, awk, vi, ssh, git, curl, gpg or cat is unix way. just look at those manuals. it's a disaster! in fact, the only true unix way command installed on your system is probably yes.

2026-03-31 05:09:40 UTC

if ww is so good, why is there n—

2026-03-25 02:53:56 UTC

https://s3.us-east-2.wasabisys.com/xyzzylink-media/f51f011e09c7b0b0c296f4eaa156e5d837c4f95cf50f1d67ec9fe2dd515ef672.jpeg

2026-03-11 07:03:36 UTC

- reply

jealous of mcdonald's success at achieving world domination

2026-03-09 06:21:09 UTC

it's an email client with pgp and ai built in

2026-03-07 22:31:57 UTC

it's only polonium if it comes from the poland region of europe

2026-03-07 20:47:28 UTC

- reply

presumably, you can write 3d text in it?

2026-03-07 08:53:50 UTC

- reply

i just think at this point, anything that doesn't have economic activity happening over it can be blocked without consequences
most people don't buy magazines though, it's mostly people whose hobby is computers, so it wouldn't replace the web
yup. reading about those types of networks, i always wondered how the hell people in the us were able to afford them.

2026-03-07 08:44:08 UTC

- reply

zines are not real discoverability. also they don't have the money for those ads and the government doesn't have an incentive to allow them to exist anyway.
yeah where i'm from most people didn't really know what the internet is until the mid-2000s, even if they had computers

2026-03-07 08:38:48 UTC

- reply

where did you learn about those other protocols?

2026-03-07 08:35:42 UTC

- reply

i hope not, otherwise we'll just have facebook be the entirety of networking

2026-03-07 08:34:17 UTC

- reply

in the context of the poll, it's networking in general—it's just nothing really happens outside websites and mobile apps, most of which are alternative frontends for the same json api.

2026-03-07 08:29:19 UTC

- reply

i feel like without networking, free software is much less meaningful.. like, even if you have a sneakernet, that makes computers just so much less useful, and the advantages of free software proportionally smaller.

2026-03-07 05:39:41 UTC

okay, you made your choice. i'm taking away y'all's alternative operating system privileges!! clearly you don't deserve them!! :KuromiPout:
#note1zg2…f352

2026-03-06 07:07:11 UTC

- reply

oh interesting, i didn't see that skimming through their docs! but it seems you're supposed to buy those at the official store, and they aren't anonymous according to this post (proton can link the buyer to the redeemer): https://discuss.techlore.tech/t/proton-gift-cards/11895/12
so if you do find a third party to buy them from, that might only add one more subpoena to the chain, depending on the party

2026-03-06 04:48:43 UTC

- reply

well, the math in monero is pretty interesting (though it can't save you from sybil attacks), but proton only supports bitcoin. and cash over mail, which can be similarly hard to do anonymously, depending on where you are. so the only winning move is not to pay.

2026-03-06 04:24:54 UTC

- reply

aside from everything else, it's funny how paying for your encrypted email puts you at much greater risk than using the free tier. self-defeating business model, to an extent.

2026-03-05 22:43:49 UTC

- reply

i mean like this (selection mine)
https://s3.us-east-2.wasabisys.com/xyzzylink-media/b8d91f8a471659c352af8fb467ad1de0eb0db1cf0b471687565be8c9e4ac55ff.png

2026-03-05 21:07:17 UTC

i don't understand pull quotes. like, they usually appear before the sentence they're quoting. so it's basically a way to make you read a sentence out of context and misunderstand it, and then read it again and then it makes sense. why :KuromiConfused:

2026-03-05 04:03:24 UTC

- reply

i guess as a colloquial internet use; i don't think it originally had that meaning?

2026-03-05 03:46:57 UTC

- reply

how do you mean?
yeah, but it's a lot of work, easier to add to the already written letter. especially if it's a long one!

2026-03-05 03:01:54 UTC

did you know? postscriptums are pointless in email, as you can just edit the previously typed text without having to start from scratch.

2026-03-04 19:28:29 UTC

would you rather

2026-03-03 03:56:02 UTC

omfg i'm finally known enough to get spam lol
every one of the past spam waves there would be people complaining about it. but no matter how much i posted, the spammers couldn't find me. now it finally happened!! success

2026-02-26 07:09:17 UTC

- reply

> Are most of them related to XML itself?
a fair amount are! pretty sure it's still possible to crash a browser tab using an svg file with recursive xml entities. but i guess outside that xml and json-ld mostly share the same issues, the latter is just simpler, making it easier to implement securely. like i think any serialization format that requires network requests to properly parse is a bad idea. and i personally dislike everything rdf-adjacent though i do see the value they (and xml's namespaces) provide :( there needs to be a format that doesn't rely on network requests but has a way to make sure you're talking about the same thing.
not my area of expertise, but i'm fairly certain that if there being a rigid structure to your compressed plaintext could cause a big vulnerability so easily, both of us would've heard about it :Kuromi:

2026-02-26 06:45:00 UTC

- reply

it does but it's an unfair critique when comparing to xml. ~30 years of creating software vulnerabilities out of thin air and counting!!
well, fwiw xmpp doesn't even have an accepted push spec, it's "deferred" after being inactive in an experimental status for too long
we have way bigger problems then. breach specifically requires every response to be more or less the same except for the attacker-chosen plaintext, that's why it's mitigated with random paddings. you can't do the partial predictions if you don't know what's inside the message and have no point of reference (like the same message with one part that differs).

2026-02-26 06:22:58 UTC

- reply

> namespaces/schema
json-ld?
yeah i don't think matrix or activitypub are great, but both have fewer issues like that, partly cause they're younger
afaict the attack works roughly like this:
secret token is xxx
attacker sends yyy, server returns xxxyyy, compressed it's 3x3y, length = 4, can predict that there's no match
attacker sends xyy, server returns xxxxyy = 4x2y, attacker sees that length is still 4 and not 6 as expected = partial match
attacker sends xxx, server returns 6x = length unchanged = full match
if i'm not mistaken, active interference is required, and in this case it would look like a ton of spam

2026-02-26 06:05:55 UTC

- reply

it's not bound to a specific service it's just considered mandatory and not just one of the nice to have features. but nvm it leaks an uncomfortable amount of information to the app developer. both fcm and apns are e2ee but the app developer shouldn't see your events imo.
https://spec.matrix.org/v1.17/push-gateway-api/

2026-02-26 05:59:37 UTC

- reply

> Only the host and client/user-agent implementers have to.
that's the problem with xmpp, the users have to care too
xml is a markup language. chat messages need something like that, but the "envelope" with all the metadata is just data, it should fit into a serialized js object. it can be cbor or messagepack, i just don't think that warrants xml.
i mean, i find the syntax to be the worst part of lisp, so i disagree there, though i can definitely see why someone would prefer sxml
i don't think disabling gzip is the solution.. i mean, how do you even execute the attack? send a thousand messages to the client with all the different bodies and wait for one to match the token? with client-side e2ee, it seems like that would be pointless.. i guess it would work against cleartext if you can message the target and see its traffic at the same time, but it would be super noticeable..

2026-02-26 05:29:41 UTC

- reply

oh and iirc matrix has better push? it has to be a core feature of the protocol, not an optional extension imo.

2026-02-26 05:28:52 UTC

- reply

idk i hate matrix with passion and wouldn't use it for anything. i don't think i'd trust the server to be secure, even if isolated from federation. xmpp is certainly better, but then you have to deal with bosh and xml and all that. one thing matrix got right is that json over https is the way.

2026-02-26 05:09:05 UTC

- reply

i think so!

2026-02-24 09:05:44 UTC

- reply

this https://soatok.blog/2026/02/17/cryptographic-issues-in-matrixs-rust-library-vodozemac/
i think the bigger news than the vulnerability is how matrix has been handling it, not very well

2026-02-23 22:53:11 UTC

- reply

:KuromiConfused: