Nostr notes by Autumn ⚘

Nostr event nevent1qqsqf2ke9m62g7ds88gvqk3lmck3djgg632hsmkwl63la5ez3dq9rdqzyz0qf0eun9yrg79uxsjh50njqqpfyegtsemr5kzyr8ct6p9n68hnczry4ul

2026-04-20T06:08:29Z

I was reading these earlier: ...

2026-04-03T14:43:26Z

In reply to nevent1q…2qc2
_________________________

I was reading these earlier:

https://data.goodstats.id/statistic/hypermarket-paling-dikenal-konsumen-indonesia-transmart-hypermart-dan-superindo-9OWCm

https://www.pecc.org/resources/foodagriculture-1/386-modern-market-growth-and-the-changing-map-of-the-retail-food-sector-in-indonesia/file

While looking into hypermart I found MPAA and Hyfresh:
https://en.wikipedia.org/wiki/MPPA_Retail_Group

belanja bikin happy ...

2026-04-03T14:13:39Z

belanja bikin happy

Nostr event nevent1qqsrfkv3uzyw65dxdjhvdvszn67scaszxd7t7jtp7eave4vsc88hruqzyz0qf0eun9yrg79uxsjh50njqqpfyegtsemr5kzyr8ct6p9n68hnc6tuvyt

2026-04-01T16:16:28Z

In reply to nevent1q…xatc
_________________________

*fixed

Nostr event nevent1qqsrv8fn3aqsuwq8dgxrpxxvgnr5zflvvnz03njlglrpclc5w4jl5gszyz0qf0eun9yrg79uxsjh50njqqpfyegtsemr5kzyr8ct6p9n68hncu7kysy

2026-04-01T15:54:07Z

pretty_good_is_online.png

Nostr event nevent1qqsd07kkwq3x59ta5nyexmy0fvfqd62at4ej4x6lw7zcc44jfurws4czyz0qf0eun9yrg79uxsjh50njqqpfyegtsemr5kzyr8ct6p9n68hnc4yhrcq

2026-04-01T15:39:31Z

lain_is_online.png

Nostr event nevent1qqsv0rjq94xdjlwp4rggff7cedn9wzefz04htq805myn0qsah57rfsczyz0qf0eun9yrg79uxsjh50njqqpfyegtsemr5kzyr8ct6p9n68hncv73ctw

2026-04-01T15:25:22Z

yonle_is_online.png

Whoops! Good taste though; The blue + neon green accent colors ...

2026-04-01T01:54:45Z

In reply to nevent1q…qrfq
_________________________

Whoops! Good taste though; The blue + neon green accent colors are interesting and look great together :sshiro_eml_sillyeyes:

Welcome to hypermart~! ⠀︶ @yonle has been busy ...

2026-04-01T01:49:03Z

Welcome to
hypermart~!
⠀︶
@yonle has been busy :sshiro_eml_computer_sleeping:
nostr:note1n9732ef96a7fe2udgxkcppcktsd7q9rfpu4xjspwgpfn6qa8q6dqdmcrdm

Nostr event nevent1qqs8l4d3uzvklcnqmg0gv6tpckx86ekndtu386zwyt4enz4vwtjhxpszyz0qf0eun9yrg79uxsjh50njqqpfyegtsemr5kzyr8ct6p9n68hnc2revme

2026-03-31T18:30:24Z

Autumn ⚘

What are your thoughts? It sounds to me that private posts ...

2026-03-31T00:58:47Z

What are your thoughts? It sounds to me that private posts through activity pub are never truly private unless the server is locked down.

Title - Pixelfed leaks private posts from other Fediverse instances

https://fokus.cool/2025/03/25/pixelfed-vulnerability.html

> "The two-way handshake happens independently of whether the other person has their account locked or not."

That sounds like a protocol problem...

> "Pixelfeds ActivityPub implementation was (and still is) incomplete. They did export the as:manuallyApprovesFollowers property, but they didn’t import them for remote accounts. Hence remote accounts always displayed as Not Locked. While being annoying for users, this is not not a security issue in itself.

> However, there was another issue. When pixelfed assumes that an account is not locked, it immediately treats a follow attempt as completed. For the server on the other end it looks like a normal follow request. It could be rejected, and pixelfed would still be convinced that a follow relation exists."

This is the responsible code:

```
if ($private == true) {

$follow = FollowRequest::firstOrCreate([

'follower_id' => $user->profile_id,

'following_id' => $target->id,

]);

if ($remote == true && config('federation.activitypub.remoteFollow') == true) {

(new FollowerController)->sendFollow($user->profile, $target);

}

} else {

$follower = Follower::firstOrCreate([

'profile_id' => $user->profile_id,

'following_id' => $target->id,

]);

if ($remote == true && config('federation.activitypub.remoteFollow') == true) {

(new FollowerController)->sendFollow($user->profile, $target);

}

FollowPipeline::dispatch($follower)->onQueue('high');

}
```

I tried it out: http://umapoi.moe/ ...

2026-03-30T00:40:49Z

I tried it out:
http://umapoi.moe/

I know of many projects but I only found snac2 after digging ...

2026-03-29T14:25:04Z

In reply to nevent1q…umns
_________________________

I know of many projects but I only found snac2 after digging around yonle's repository and looking at some of @mateusz6768@esp32fedi.cjdgrevival.com content, it is new to me and I was on video call with my best friend telling him about the project and how ambitious it is. Very exciting!

Oh this is amusing: ...

2026-03-27T23:33:40Z

Oh this is amusing:

operating radio seems fun. To do anything similar here, I think I ...

2026-03-27T23:10:55Z

In reply to nevent1q…78jv
_________________________

operating radio seems fun. To do anything similar here, I think I need a 'short wave radio' license.

best_way_to_wake_someone_up.swf #azumangaDaioh #anime #flash ...

2026-03-27T18:48:51Z

best_way_to_wake_someone_up.swf

#azumangaDaioh #anime #flash #ruffle #SWF
https://media.fedinet.waltuh.cyou/media/fb53067bfcaa806ba281b4462a74634f268de7851e7c7cd2be77463236a0a2bd.swf

finished networking for system administrators, time to read tls ...

2026-03-21T16:27:10Z

finished networking for system administrators, time to read tls mastery now

Is anyone hosting chatmail/ deltachat? Do you have any advice? ...

2026-03-21T14:47:32Z

Is anyone hosting chatmail/ deltachat? Do you have any advice?

Looking for your wisdom, what I see:

For messaging, it's email on the backend, imap/smtp, supports verified groups, e2ee, qr-code key sharing, and calling.

A question on best practices/ common sense: For protecting users you would disable p2p features like calling, disable ip logging and full email headers in postfix/dovecot configs OR route logs to tmpfs?

So far chatmail seems like a pretty standard simple service, just need to protect the server, use intrusion detection, firewall, etc

Or should I avoid hosting this service for any reason?

drift.swf :smugDance: #flash #ruffle #music #SWF ...

2026-03-14T04:23:45Z

drift.swf :smugDance:

#flash #ruffle #music #SWF
https://media.fedinet.waltuh.cyou/media/b4a04c079000ebfe1c32c6db4dfde739e66d36572e86ef92c532eecc8b91ed07.swf

Yes! That would be really nice~ :BocchiNervous:

2026-03-11T01:13:05Z

In reply to nevent1q…r777
_________________________

Yes! That would be really nice~ :BocchiNervous:

Installation guide: Step 1. Add contrib & non-free in ...

2026-03-10T08:34:32Z

Installation guide:

Step 1. Add contrib & non-free in /etc/apt/sources.list

```
deb http://deb.debian.org/debian/ trixie main contrib non-free non-free-firmware

deb http://security.debian.org/debian-security/ trixie-security contrib non-free main non-free-firmware

...and often also for -updates:

deb http://deb.debian.org/debian/ trixie-updates non-free-firmware non-free contrib main
```

---
> Example of modified sources.list:
```
#deb cdrom:[Debian GNU/Linux 13.3.0 _Trixie_ - Official amd64 DVD Binary-1 with firmware 20260110-11:00]/ trixie contrib main non-free-firmware

deb http://deb.debian.org/debian/ trixie main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian/ trixie main contrib non-free non-free-firmware

deb http://security.debian.org/debian-security/ trixie-security contrib non-free main non-free-firmware
deb-src http://security.debian.org/debian-security trixie-security contrib non-free main non-free-firmware

# trixie-updates, to get updates before a point release is made;
# see https://www.debian.org/doc/manuals/debian-reference/ch02.en.html#_updates_and_backports
deb http://deb.debian.org/debian/ trixie-updates non-free-firmware non-free contrib main
deb-src http://deb.debian.org/debian/ trixie-updates non-free-firmware non-free contrib main

# This system was installed using removable media other than
# CD/DVD/BD (e.g. USB stick, SD card, ISO image file).
# The matching "deb cdrom" entries were disabled at the end
# of the installation process.
# For information about how to configure apt package sources,
# see the sources.list(5) manual.
```

Step 2. apt update

Step 3. apt install linux-headers-amd64

Step 4. apt install nvidia-kernel-dkms nvidia-driver firmware-misc-nonfree nvtop

Step 5. mokutil --import /var/lib/dkms/mok.pub

Step 6. when prompted, enter a password

Step 7. systemctl reboot

Step 8. On boot there will be a prompt to enroll the MOK, select yes, when asked, enter the password from step 6

Step 9. Enter TTY with CTRL+ALT+F3, enter username, password, '''sudo nano /etc/default/grub'''

Step 10. Add ``` nvidia_drm.modeset=1 ``` as a boot option. This is achieved by appending it within the file /etc/default/grub to GRUB_CMDLINE_LINUX_DEFAULT="" without deleting other parameters.

---
> Example of modified grub file:
```
# If you change this file or any /etc/default/grub.d/*.cfg file,
# run 'update-grub' afterwards to update /boot/grub/grub.cfg.
# For full documentation of the options in these files, see:
# info -f grub -n 'Simple configuration'
GRUB_DEFAULT=0
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR=`( . /etc/os-release && echo ${NAME} )`
GRUB_CMDLINE_LINUX_DEFAULT="nvidia_drm.modeset=1 quiet"
GRUB_CMDLINE_LINUX=""

# If your computer has multiple operating systems installed, then you
# probably want to run os-prober. However, if your computer is a host
# for guest OSes installed via LVM or raw disk devices, running
# os-prober can cause damage to those guest OSes as it mounts
# filesystems to look for things.
#GRUB_DISABLE_OS_PROBER=false

# Uncomment to enable BadRAM filtering, modify to suit your needs
# This works with Linux (no patch required) and with any kernel that obtains
# the memory map information from GRUB (GNU Mach, kernel of FreeBSD ...)
#GRUB_BADRAM="0x01234567,0xfefefefe,0x89abcdef,0xefefefef"

# Uncomment to disable graphical terminal
#GRUB_TERMINAL=console

# The resolution used on graphical terminal
# note that you can use only modes which your graphic card supports via VBE/GOP/UGA
# you can see them in real GRUB with the command `videoinfo'
#GRUB_GFXMODE=640x480

# Uncomment if you don't want GRUB to pass "root=UUID=xxx" parameter to Linux
#GRUB_DISABLE_LINUX_UUID=true

# Uncomment to disable generation of recovery mode menu entries
#GRUB_DISABLE_RECOVERY="true"

# Uncomment to get a beep at grub start
#GRUB_INIT_TUNE="480 440 1"
```

Step 11. systemctl reboot

Step 12. At the login screen, you will see virtual keyboard and desktop environment in the bottom left corner, click desktop environment, select x11 instead of Wayland

Step 13. login

Will test methods soon to attempt to enable Wayland and preserve video memory on hibernate/ suspend.

Hello World! My name is Autumn ⚘, I have far too many ...

2026-03-10T06:38:53Z

Hello World! My name is Autumn ⚘, I have far too many interests, let's talk!

I am a data hoarder and archivist with an obsession for media, I save everything I can, currently all drives are full and we need to invest in tape storage! I use trackers to record everything I consume. Let's talk music! I am also constantly watching anime, reading manga/ manhua/ manhwa & books/ light novels.
Let's share trackers?
(LastFM, MyAnimeList, GoodReads/ BookWyrm, Simkl/ iMDB, etc.)

Currently learning how to self host, starting with a mail server to learn the ropes. Looking forward to contributing to development where possible, if possible in the future.

I am a creative, right now I don't have the funds to work on physical goods, so I have been exploring and learning multimedia editing and creation using foss tools on Linux; Avidemux, Kdenlive, Audacity, Mixxx, Inkscape, Glaxnimate, GIMP, Krita, and still exploring!

What do I do for work? Drive, if you need a reliable and smooth ride, I'm your person. I haven't had a formal position in years. I do have some experience in the skilled trades. I could frame a room, weld some pipe, or draft a blueprint for you.

If I could be working on anything right now I would love to be faceting some gems or casting rings. Need an upgrade before I can do any real modeling in blender, just taught myself how to make a coin with ridges and faces.

I also run the Rusty__Shackleford account (Mastodon, Pixelfed, Loops, WriteFreely). Where I post memes, satire, news, art history, music, I make around 40-60% of the content, that number has grown since I have flushed out my knowledge of multimedia editing and creation.

What am I currently reading?
"Run Your Own Mail Server" by Michael W Lucas and "Modern C, Third edition" by Jens Gustedt.

What am I working on?
Always a music video.
FFmpeg wrapper logic. (I have Codeberg)
Currently rewriting a paper on the intersection of copyright, the DMCA, Fair Use, ownership, & piracy in the digital age.

What languages am I learning?
I am currently learning Japanese and Irish.

Personality type result of INTP-A (logician). Put anything in front of me and it will become an obsession. I'm always trying to learn more, crack a wise ass joke, engage in some friendly debate, or find a good puzzle.

If I could have anything what would it be? A clone, there's not enough hours in the day for everything. Also, better eyes, my vision is going out the window.

Am I playing any games? Mostly just PlayStation 1 and 2 titles.

When I was younger I grew up on a small farm during half of the year, learned to ride horses, and became comfortable taking care of animals like chickens, ducks, rabbits, and physical labor like planting and cutting wood.

My tastes and interests really are all over the place. I will only be on here when I am at home on my computer, posting personal updates/ projects and sharing music or media.

Please, feel free to join me, relax and chat at your leisure.

#introduction

Updated banner with a silent mp4 to test animated/ looping ...

2026-03-09T00:50:37Z

Updated banner with a silent mp4 to test animated/ looping banners