Home | Notifications | New Note | Local | Federated | Search | Logout

Federated Timeline


mame muumimamma@mametsuko@mk.absturztau.be (2026-09-17 16:43:50) つ ^_^ ---Attachments--- image: https://misskey-taube.s3.eu-central-1.wasabisys.com/files/webpublic-78ac5111-2ccf-42c3-a893-860f27283b99.webp

Reply to @relay@mastodon.hakurei.win :onmyou:‮:vc:‭Charlie Root‬@relay@mastodon.hakurei.win (2026-09-17 16:26:37) そういやこのUI、アイコンが丸くなって最近のTwitterに近づいたかと思いきやお気に入り⭐はそのまま

:onmyou:‮:vc:‭Charlie Root‬@relay@mastodon.hakurei.win (2026-09-17 16:23:51) クリーパーにやられて緑色がトラウマになるAI、もうAGIで良いだろ

:onmyou:‮:vc:‭Charlie Root‬@relay@mastodon.hakurei.win boosted: @v_shirasu@buicha.social (2026-09-17 15:04:23) GPT-6 Astraが141時間にわたって「マインクラフト」をプレイ、クリーパーに全財産を吹き飛ばされて「緑色の物体」がトラウマになりジャガイモ農家に
https://gigazine.net/news/20260917-gpt-6-astra-plays-minecraft/

Reply to @hos1miya@misskey.0sakana.xyz :hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-09-17 16:13:32) なるほど
あと2個追加で買うか ---Attachments--- image: https://misskey.0sakana.xyz/files/webpublic-ad855978-5e90-409d-a935-284a51b45f74
image: https://misskey.0sakana.xyz/files/webpublic-52ade7c8-d150-4631-8e27-6d7976bd03f3

KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 16:11:36) Honestly, it looks mid

東京都@Tokyo@unnerv.jp boosted: @UN_NERV@unnerv.jp (2026-09-17 15:53:06) 【東京都 気象警報・注意報 2026年09月17日 15:52】
伊豆諸島北部では、強風や高波に注意してください。
波浪注意報について、18日昼前以降、波浪警報級に到達する見込みです。
伊豆諸島南部、小笠原諸島では、落雷や強風、高波に注意してください。
波浪注意報について、18日昼前以降、波浪警報級に到達する見込みです。
#気象警報注意報 #東京都 ---Attachments--- image: https://media.unnerv.jp/media_attachments/files/117/285/059/410/777/061/original/14b2ab36931aa8ea.png
image: https://media.unnerv.jp/media_attachments/files/117/285/059/518/761/861/original/54369ccc3d2775ae.png
image: https://media.unnerv.jp/media_attachments/files/117/285/059/693/134/635/original/f1b10eb6a8257d46.png

特務機関NERV@UN_NERV@unnerv.jp (2026-09-17 15:53:06) 【東京都 気象警報・注意報 2026年09月17日 15:52】
伊豆諸島北部では、強風や高波に注意してください。
波浪注意報について、18日昼前以降、波浪警報級に到達する見込みです。
伊豆諸島南部、小笠原諸島では、落雷や強風、高波に注意してください。
波浪注意報について、18日昼前以降、波浪警報級に到達する見込みです。
#気象警報注意報 #東京都 ---Attachments--- image: https://media.unnerv.jp/media_attachments/files/117/285/059/410/777/061/original/14b2ab36931aa8ea.png
image: https://media.unnerv.jp/media_attachments/files/117/285/059/518/761/861/original/54369ccc3d2775ae.png
image: https://media.unnerv.jp/media_attachments/files/117/285/059/693/134/635/original/f1b10eb6a8257d46.png

selfcare.tech@selfcaregentle@hachyderm.io (2026-09-17 15:50:45) Set an alarm for 2 minutes and focus mindfully on your breathing, nonjudgmentally bringing yourself back from any distractions.

KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 15:42:11) What do I even do? Do I even do anything??? (negativity spiral)

Reply to @fell@ma.fellr.net KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 15:36:12) @fell@ma.fellr.net To be honest, I don't dislike the minimalist vibe; they say simple is best and I can see what they mean by that.

:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-09-17 15:28:55) 発見 ---Attachments--- image: https://misskey.0sakana.xyz/files/webpublic-923f5d7c-f510-42f9-94d8-c6a10b7ed1b9

Reply to @rio@kawane.misskey.online Felix Urbasik@fell@ma.fellr.net (2026-09-17 15:26:11) @rio I was going to do something simple like this.

KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 15:24:56) I don't know what I'm doing but I'll just wing it ​:tearpleadsmile:​

KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 15:24:36) Bruh I've literally never designed an English business card in my life

Reply to @RehnyNytes256@shota.house KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 15:23:08) @RehnyNytes256@shota.house excellence Japaneseness yes yes... 🥰

KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online boosted: @RehnyNytes256@shota.house (2026-09-17 15:19:58) @rio@kawane.misskey.online they also had the Japanese awards and Pokemon company won the ministry of finance award or whatever, and Ghost of Yotei won an award for "excellence". Lmao ​:blobfoxangrylaugh:​ maybe it's a good thing I dont watch this stuff...

Reply to @RehnyNytes256@shota.house Rehn@RehnyNytes256@shota.house (2026-09-17 15:19:58) @rio@kawane.misskey.online they also had the Japanese awards and Pokemon company won the ministry of finance award or whatever, and Ghost of Yotei won an award for "excellence". Lmao ​:blobfoxangrylaugh:​ maybe it's a good thing I dont watch this stuff...

Reply to @RehnyNytes256@shota.house KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 15:17:25) @RehnyNytes256@shota.house tell me about it I don't think I'm keeping anything in track outside of my bubble... ​:blobcatgooglytrash:​

KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 15:16:40) Now I just need to make the boring I meant aesthetically more Professional English business card.

Reply to @rio@kawane.misskey.online Rehn@RehnyNytes256@shota.house (2026-09-17 15:15:38) @rio@kawane.misskey.online how do people keep up with everything going on ​:akko_tired:​

Today was just the Capcom stream so we missed nothing ​:smug4:​ jajajaja jkjk

Reply to @SHINANOMAI@misskey.shinanomai.xyz KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 15:12:46) @SHINANOMAI@misskey.shinanomai.xyz すごい

KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 15:12:30) Today is Tokyo Game Show day, apparently.

Reply to @rio@kawane.misskey.online 信濃眞伊@SHINANOMAI@misskey.shinanomai.xyz (2026-09-17 15:12:15) @rio@kawane.misskey.online これはただの背景かも

ただしVRChatは動きます

KawaneRio🇯🇵🌸🍡@rio@kawane.misskey.online (2026-09-17 15:11:17) Oh my god is that NixOS running VRChat‽

RE: https://misskey.shinanomai.xyz/notes/ar8p349uwggp002f

しらす@v_shirasu@buicha.social (2026-09-17 15:04:23) GPT-6 Astraが141時間にわたって「マインクラフト」をプレイ、クリーパーに全財産を吹き飛ばされて「緑色の物体」がトラウマになりジャガイモ農家に
https://gigazine.net/news/20260917-gpt-6-astra-plays-minecraft/

:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-09-17 14:48:46) めっちゃ晴れてんな今日
この勢いで雨予報全部消えてくれ

Reply to @hongminhee@hollo.social 洪 民憙 (Hong Minhee) :nonbinary:@hongminhee@hollo.social (2026-09-17 14:45:43) Okay, now it's merged!

https://w3id.org/fep/22cd

fedicat@fedicat@pc.cafe boosted: @christin@lsbt.me (2026-09-17 13:57:09) Quick heads-up for other Mastodon admins: this registration spam wave isn't over yet.

On lsbt.me, we first saw a flood of API registrations using Python/aiohttp. The telltale signs were usernames following the pattern bp plus 16 hex characters, and the sign-up reason was always "Automated protocol deliverability probe". A narrow block on that user agent stopped the first wave.

Today, however, five new registrations came in with the same usernames and the same sign-up reason. This time the bot simply identified itself as Chrome 126. That's exactly why a user agent is only useful as a short-term filter. It's a header the client can set to anything.

The requests go to POST /api/v1/accounts. This endpoint lets client apps create a new local account directly in the app. No app needs it for OAuth connections to existing accounts. #FediSuite doesn't use it either. It registers itself via /api/v1/apps, obtains consent via /oauth/authorize, and then works with a user token. Regular sign-up through the Mastodon website is also handled separately via POST /auth.

So I've completely disabled API account creation on lsbt.me. Web sign-up, OAuth, and existing clients keep working as before. Anyone who wants a new account just signs up once on the web as usual and can then use any client.

If you'd also rather not offer this optional native sign-up path, you can add the following to your Nginx server block, before the general location / block. The example assumes the @proxy location that many Mastodon Nginx configs already include:

location = /api/v1/accounts {
limit_except GET {
deny all;
}

try_files $uri @proxy;
}

This returns a 403 only for POST /api/v1/accounts. The read-only GET endpoint remains reachable. As always, run nginx -t afterwards and only reload once the test passes.

#Mastodon #Fediverse #MastoAdmin #FediAdmin #FediMod #FediBlock #Moderation #Registration #Spam #Nginx #SelfHosting #SysAdmin #ActivityPub

🏳️‍⚧️ Christin Löhner 🏳️‍🌈@christin@lsbt.me (2026-09-17 13:57:09) Quick heads-up for other Mastodon admins: this registration spam wave isn't over yet.

On lsbt.me, we first saw a flood of API registrations using Python/aiohttp. The telltale signs were usernames following the pattern bp plus 16 hex characters, and the sign-up reason was always "Automated protocol deliverability probe". A narrow block on that user agent stopped the first wave.

Today, however, five new registrations came in with the same usernames and the same sign-up reason. This time the bot simply identified itself as Chrome 126. That's exactly why a user agent is only useful as a short-term filter. It's a header the client can set to anything.

The requests go to POST /api/v1/accounts. This endpoint lets client apps create a new local account directly in the app. No app needs it for OAuth connections to existing accounts. #FediSuite doesn't use it either. It registers itself via /api/v1/apps, obtains consent via /oauth/authorize, and then works with a user token. Regular sign-up through the Mastodon website is also handled separately via POST /auth.

So I've completely disabled API account creation on lsbt.me. Web sign-up, OAuth, and existing clients keep working as before. Anyone who wants a new account just signs up once on the web as usual and can then use any client.

If you'd also rather not offer this optional native sign-up path, you can add the following to your Nginx server block, before the general location / block. The example assumes the @proxy location that many Mastodon Nginx configs already include:

location = /api/v1/accounts {
limit_except GET {
deny all;
}

try_files $uri @proxy;
}

This returns a 403 only for POST /api/v1/accounts. The read-only GET endpoint remains reachable. As always, run nginx -t afterwards and only reload once the test passes.

#Mastodon #Fediverse #MastoAdmin #FediAdmin #FediMod #FediBlock #Moderation #Registration #Spam #Nginx #SelfHosting #SysAdmin #ActivityPub
Older Notes