https://bsky.app/profile/nih-llamas.bsky.social/post/3komzcim76p26

help-circle
  • PorkrollPosadist [he/him, they/them]M
    hexbear
    79
    edit-2
    3 months ago

    There have been several VERY NASTY CVEs since I set up matapacos in 2022.

    Remote code execution: https://github.com/mastodon/mastodon/security/advisories/GHSA-9928-3cp5-93fm A.K.A. "Toot Root"

    Hijacking user accounts: https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw

    Among others (there was at least one more really bad one)

    link
    fedilink
    • bitwolf@lemmy.one
      hexbear
      55
      3 months ago

      I would be hilarious if someone hijacked Trump's account using that vuln

      link
      fedilink
      • InevitableSwing [none/use name]
        hexagon
        hexbear
        43
        3 months ago

        I want to go on record that if Trump suddenly says "I AM YOUR LORD AND SAVIOR OUR BIG WET BOY!" - I had nothing to do with it.

        link
        fedilink
    • ProletarianDictator [none/use name]
      hexbear
      10
      3 months ago

      you run matapacos? I've been meaning to join, but haven't bc of the email address requirement. Is there a way around that?

      link
      fedilink
        • PorkrollPosadist [he/him, they/them]M
          hexbear
          8
          edit-2
          3 months ago

          Yeah. Email is baked into the software so a throwaway is needed for technical reasons, but only for registration and password recovery. I don't have any e-mail services blocked. You are encouraged to use a throwaway e-mail service unless you want password recovery and (optional) email notifications to work.

          Recently we added manual account activation due to a spam wave. You don't have to write an essay outlining your ideological beliefs or anything. It is strictly an anti-bot measure.

          link
          fedilink
    • Jess@midwest.social
      hexbear
      28
      3 months ago

      Weren't they also forced to admit that and/or publish their code because of a potential GPL conflict?

      link
      fedilink
      • oscardejarjayes [comrade/them]
        hexbear
        26
        3 months ago

        yeah, they published their code, but in an inconvenient manner. They also updated it once every few months (and then stopped after a year).

        link
        fedilink
  • happybadger [he/him]
    hexbear
    45
    edit-2
    3 months ago

    It's hilarious that they haven't gone after his IPO. He has an outdated mastodon clone with 1m active monthly "users", $3.4m in 2023 revenue, and $49m in 2023 expenses. That's such a shitty penny stock of a company and yet he made $5B $3B from that.

    link
    fedilink
      • @MeetInPotatoes@lemmy.ml
        hexbear
        16
        3 months ago

        "A fool and their money are soon parted."

        -Dr. John Bridges

        "There are a disproportionately large number of fools in the Trump-supporting population."

        • MeetInPotatoes
        link
        fedilink
      • happybadger [he/him]
        hexbear
        26
        3 months ago

        Correction: https://twitter.com/NYDailyNews/status/1772686796817666098

        The soaring stock price, which climbed by more than 30% Monday, would value the company at more than $5 billion, which could give Trump an eye-popping personal windfall of about $3 billion for the 79 million shares he owns.

        The former president is barred from selling the shares for six months, although the company could tweak those restrictions.

        The board is stacked by him so they'll likely approve an early sale for $3B+- whatever the stock price reaches by then, at which point it will probably be a pump and dump.

        link
        fedilink
      • Sphere [he/him, they/them]
        hexbear
        17
        3 months ago

        Yeah he's got a deal going where they IPO it and fleece the hogs and he gets a big pile of stock. It's what he should have done with that dumb casino company he put together back in the 90s, but he just used that to offload his bad debts instead, while having it pay him for his own jet travel and stuff like that to make a few million here and there on the side.

        link
        fedilink
  • betelgeuse [comrade/them]
    hexbear
    32
    3 months ago

    Yeah Trump started it when The_Donald was banned from reddit. He named it after the podcast.

    link
    fedilink
  • zifnab25 [he/him, any]
    hexbear
    26
    3 months ago

    Some clever entrepreneurial software types could definitely have fun with this

    link
    fedilink
  • davel [he/him]
    hexbear
    23
    3 months ago

    Sure, why not? I can’t think of a reason for it not to be that.

    link
    fedilink