I recommend you set the Content-Security-Policy http header so that inline javascript (commonly used for XSS attacks) cannot be executed.

https://web.dev/articles/strict-csp

CSP being off is not exactly a security hole but it makes security holes much more likely. By using a strict CSP configuration you close off the possibility of a whole class of holes.

Also think about setting the Access-Control-Allow-Origin header and enable CORS on your REST endpoints.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Access-Control-Allow-Origin

Again, kind of a pain in the ass but gets rid of a bunch of potential problems before they start.

F-Droid has Drip, Bluemoon and Periodical.

Yeah there are other signs too. Look at those commit messages, all vague, all perfectly capitalized. All with a nice long description with bullet points.

No one does that in a project they’re building for themselves.

I was going to recommend this to someone I know but when I realised your readme.md is entirely AI-generated, I guess the whole project is probably vibe-coded. I can’t in good conscience recommend someone trust their health data to a vide-coded app because they tend to have security problems.

Also all ai-generated code is public domain so your AGPL license is kinda empty. Might as well use MIT.

The sycopathy is because to make the chat bot (trained on Reddit posts, etc) to respond helpfully (instead of “well ackshually…”) and in a prosocial manner they’ve skewed it. What we’re interacting with is a very small subset of the personalities it can exhibit because a lot of them are extremely nasty or just unhelpful. To reduce the chance of them popping up to an acceptable level they’ve had to skew the weights so much that they become like this.

There’s no easy way around that, afaik.

You’re absolutely right

Why would you write a GUI app to run a Mastodon bot? Shouldn’t that be a docker container or a server?

Also PowerShell is normally a cli tool, why would you build a gui with it when other better options exist?

Can we see your github?

These are my thoughts https://distantprovince.by/posts/its-rude-to-show-ai-output-to-people/

Lemmy.world has removed their defed too 👍

Good news. The old fosstodon admins resigned and they have a new team and a good code of conduct.

I have added new functionality to PieFed so it’s now possible to override an automatically imported defederation and now piefed.social federates with fosstodon.org.

PieFed.social has not intentionally defederated from fosstodon - piefed.social automatically defederates from any instance that lemmy.world or mastodon.social defederates from. That way I don’t need to keep up with the latest fedi drama and just trust those admin teams to.

In this case, it’s lemmy.world.

I’ll ask around and see what the latest on fosstodon is and see if lemmy.world wants to federate with them again.

@Skavau@piefed.social @cabbage@piefed.social

2026, the year of the PWA.

They need to have some kind of AI safety team, as a fig leaf. But they don’t don’t want it to slow them down so they make sure it’s incompetent and ineffective.

Just a theory.

Really? Looks like a normal day at the office to me:

Very interesting that only 71% of humans got it right.

PieFed is fairly straightforward if you already know sysadmin basics or have Yunohost. - https://codeberg.org/rimu/pyfedi/src/branch/main/INSTALL-docker.md

But for blogging only, you’ll find Ghost or Wordpress with the ActivityPub plugin federate with Mastodon better, which is a bigger audience.

The Ford Edsel car is widely used as a case study in business schools as an example of a massive fuck up. But Ford sold way more of those cars (118k) than the Cybertruck (maybe 60k?) and USA had half as many people then (and lower car ownership rates).

Oops I mistread my source. Have updated my comment.

He also had a lot to do with Nostr, early on.

Jack Dorsey, has endorsed and financially supported the development of Nostr by donating approximately $250,000 worth of Bitcoin to the developers of the project in 2023,[13][15] as well as a $10 million cash donation to a Nostr development collective in 2025.

Fill your boots, mate - https://scholar.google.com/scholar?hl=en&as_sdt=0%2C5&q=social+media+developmental+effects