AWS übergibt das OpenSearch-Projekt an die Linux Foundation
Die OpenSearch Software Foundation, unter dem Dach der Linux Foundation, soll als neue Heimat von OpenSearch Vertrauen schaffen und zur Mitarbeit einladen.
As part of our articles series we have a regular series of Exilian Interviews pieces, where we take real deep-dive discussions with creators from the Exilian community about their influences, passions, ideas and projects.
Here from the archive we have a chat with Stormwell, creator of the Dieselpunk "Frozen Skies" setting for #SavageWorlds, a world of high-flying chases, ferocious wulvers, mysterious wyndryders, and the powers of Darmonica competing for the resources and mysteries of the cold land of Aleyska. Check it out! exilian.co.uk/forum/index.php?…
Climate-driven flooding destroyed Tony Calhoun’s home in 2022. But as the water receded, his despair only grew. Now, his family hopes to bring attention to the mental health toll of extreme weather.
Ooooh v2.5.0 of the magnificent OneDrive client for #Linux is out! It supports “threaded” downloads! Been waiting for this update. In the words of Rocky from Project Hail Mary 🎵Excite!🎵
Open Source Summit: So wehren sich Projekte gegen Patenttrolle
Patenttrolle bedrohen auch Open-Source-Projekte. Zusammen mit Unified Patents erhalten Mitglieder der Linux Foundation und CNCF jetzt viele Schutzmaßnahmen.
Résister à la culpabilisation: Mona Chollet Au Poste!
C'est sa première convocation Au Poste, et on l'attendait depuis... des mois/années. Mona Chollet vient nous parler de son dernier ouvrage Résister à la culpabilisation - Sur quelques empêchements d’exister, dans la collection « Zones » à La Découverte. De la diabolisation des enfants, de la culpabilisation des femmes et des mères, au cul
(orig thread federate.social/@jik/113152528…) intuit.com/: at login it asked me to let it send me a text to verify my number, I clicked "Skip". When I then went to the "Sign in & security" page, it said my phone number was already "Verified". So why did it ask to verify it? After I changed my email address, that same page immediately said that my newly set email address was "Verified", even though I hadn't yet clicked the link in the verification email they sent. #smdh 🤡 #ChangeOfAddress 🧵
At jetblue.com/, it wouldn't let me log in with the password stored in my password manager. I was able to do a password reset and set my password to the one I already had stored, despite the fact that the password reset screen claimed I wasn't allowed to use my previous three passwords. 🤔 On their profile screen they said to "Use an email address you'll always have access to," but then didn't make me very my address after changing it. 🤔🤔 #ChangeOfAddress 🧵
The TD Bank retail retail card site tdfinancing.com/ is disappointing. Because they moved the site yet again I had to reset my password. * When I entered the password generated by my password manager, I got this error: "At least 1 uppercase, 1 lowercase and optional special character is required. Minimum length: 8." An "*optional* special character is *required*"? Really? (continued) #ChangeOfAddress 🧵
(tdfinancing.com/ problems, continued) * They were rejecting my password because it contained "^", which isn't allowed. Two failures here: prohibiting some special characters, and not telling the user what's allowed. * When I changed my email address, they only sent the notification to the new email address, with "If you did not perform this action, contact us immediately..." Yo, if I didn't do it, then it's not my email address and I didn't get this email! Idiots. #ChangeOfAddress 🧵
Oh, one more thing about tdfinancing.com/ which I forgot... After I changed my password, it displayed this message, really large: "Your password has been captured!" "captured"? Seriously? Was this site built by someone who is not a native English speaker and has so little experience building sites in English that they don't know this is not the term anybody ever uses for this? "captured"? wtf, man. #ChangeOfAddress 🧵
At ko-fi.com/, they sent email to my old address with a link to confirm the address change, but they didn't send a confirmation link to the new address. After making the change I am able to log in with the new address and my account page lists the new address, but it says "Your email is *not verified*" but provides no instructions or mechanism for verifying it. 🤡 #ChangeOfAddress 🧵
linkedin.com/ is, as usual, a dumpster fire. It accepts the AnonAddy email address when I add it, and sends the necessary verification email to the new address, but when I click the link in the email I get the error page shown below. I note with amusement the copyright notice at the bottom of the page dated 2020. (more LinkedIn fun continued in the next post) #ChangeOfAddress 🧵
(linkedin.com/ dumpster fire adding AnonAddy address, continued) Despite the fact that I got an error when I clicked the verification link, the address now shows up as verified on my addresses list—see the first screenshot below. But when I click the "Make primary" link, I get the messed-up page shown in the second screenshot below, and my primary address is _not_ changed to the new address. I think I'm just going to give up on this one. *sigh* #ChangeOfAddress 🧵
More on Ko-Fi (federate.social/@jik/113152721…)... A few hours after I emailed feedback@ko-fi.com about the problems I described previously, I got an email with a link from Zendesk asking me to "Create a password for Ko-fi.com Support Portal." I clicked the link and instead of being asked to create a password I was brought to the Ko-Fi login screen. I logged in and was brought to help.kofi.com/, which has a "Sign in" button. I clicked the button and it did nothing. #smdh #ChangeOfAddress 🧵
Ko-Fi support eventually responded and claimed I couldn't verify my address because AnonAddy addresses aren't allowed on the site. That was a lie. I subsequently tried changing my address back to my family domain, and then to gmail.com, and I encountered the same bug (unable to verify new address) in both cases. I ended up deleting my old account and creating a new one under the AnonAddy address; the address of the new account was verified with no trouble. Ko-Fi are 🤡 #ChangeOfAddress 🧵
At yahoo.com/, they won't let me change the primary email address on my account because "This is your Yahoo account username, so it can't be removed," which is literally not true; I have an actual username which I use to log in which isn't the email address, and in any case they should, but don't, allow me to add a new email address, make it my primary, and then remove the old one. So many other sites do this successfully, but not Yahoo. (continued) #ChangeOfAddress 🧵
Note that this Yahoo account was created before 2010, and when I created it I had a different email address, so at some point in the past Yahoo allowed people to change the primary email addresses in their accounts. They've just inexplicably decided to remove that functionality from their app. #ChangeOfAddress 🧵
I attempted today to change my email address on #MailGun.com, and wooh boy, it did not go well. This isn't nearly going to fit in one post, so buckle up. When I logged in, the site informed me that it was going to convert my MailGun login to a "Sinch ID" (MailGun was acquired by Sinch a few years ago). I was not given a choice about skipping this conversion. It seemed to go fine. (continued) #ChangeOfAddress 🧵
(mailgun.com address change continued) The next step is to change my address, right? Nope! Maybe I could do that when logging into MailGun directly, but now that my login has been converted to a Sinch ID, instead of an "Edit" button next to my address, there's an "Info" button. When I click on it, it says, "Unfortunately, editing your email address is no longer supported. You will need to invite a new user with the desired email address." (continued) #ChangeOfAddress 🧵
(mailgun.com address change continued) "No problem," I think, "I'll add my new address, transfer account ownership to it, and then remove the old address." I was able to invite my new address to my MailGun account as a new user, but oddly, it created the new user as a native MailGun account, not a Sinch ID. I have no idea why a site would begin migrating existing users to a new ID system before changing their new-user workflow to use the new system! (continued) #ChangeOfAddress 🧵
(mailgun.com address change continued) There's an interesting workflow for adding 2FA on MailGun (not Sinch ID): (1) scan QR code; (2) click button to download recovery key; (3) click Next button; (4) enter 2FA code to enable 2FA. There's no way to download or regenerate the recovery key after 2FA is enabled. This is atypical. Usually the recovery key download doesn't happen until after 2FA is enabled and there's a way to regenerate and download it again later. (continued) #ChangeOfAddress 🧵
(mailgun.com address change continued) I've now got the new address added to the account and activated, so I need to transfer account ownership to it. I go to the "Account users" page and see this. I think, "'Delete' clearly means to delete a user from the account, so 'Deactivate' must mean to deactivate a user. I guess if I deactivate the account owner then ownership will transfer to the other user?" Nope! It actually deactivates 2FA. How confusing! (continued) #ChangeOfAddress 🧵
(mailgun.com address change continued) I've just deactivated 2FA by accident, so I need to fix that. I reactivate 2FA, then, to make sure everything is OK, I log out and back in. The new 2FA I just added doesn't work. Apparently I just reactivated 2FA for my native MailGun account which I can no longer use to log in. The 2FA which was migrated over to my Sinch ID with my account was never deactivated, so that's the one I have to use to log in. #smdh (continued) #ChangeOfAddress 🧵
(mailgun.com address change continued) Overall this is a pretty shitty user experience. I submitted a support ticket to MailGun asking them how to change ownership of the account from my old address to my new one, and reporting to them all the other edge cases and poor workflows I encountered as described above. Will they send back a useful reply? Who knows, but let's hope they at least do better than Ko-Fi did earlier this week! #ChangeOfAddress 🧵
At eyemedvisioncare.com, changing my address went fine, but there's a little absurdity worth mentioning: every time you log in they send a verification code to your email that you have to enter (bad 2FA, but better than nothing), and the code is _10 digits long_. That's... ridiculous?! Some developer or product manager somewhere: "Let's make it MORE digits, because MORE is more secure, right?" No, dumbass, not right. #smdh #ChangeOfAddress 🧵
Over at memorystock.com, it looks like their web site hasn't been updated in 10 or 20 years, and, alas, there's no way to change your email address or ask them to delete your account. #ChangeOfAddress 🧵
At login.live.com (i.e., my Microsoft account), after I logged in to change my address it displayed my current contact info (email addresses, phone numbers) and asked me to confirm that it's correct. I clicked yes. It asked again. I clicked yes again. It asked a third time (!!). I clicked yes a third time. Finally it stopped asking. wtf I had to go rooting around a bit in account settings to find everywhere email addresses were stashed, but I think I found them all. #ChangeOfAddress 🧵
This is what happened, after a long delay, after I clicked on the address verification link to confirm my address change at cloud.mongodb.com/. It's almost like they are having a database performance issue. They should talk to some database professionals about that. #MongoDB #MongoDBIsWebScale #tech #NoSQL #ChangeOfAddress 🧵
I'm spending Yom Kippur atoning for my privacy sins by continuing to anonymize the email addresses for my accounts by changing them to #AnonAddy addresses. Let's talk about changing your email address on #NationalGrid's billing portal. This message incorrectly says to specify a notification email address "If you'd rather receive notifications at an email address that is different." That field is actually required: you can't submit the form without filling it in. (continued) #ChangeOfAddress 🧵
(National Grid email address change shenanigans continued) Once you submit the email address change form, you see this dialog. It's obviously not true that the code expires "10 minutes after it is received." In fact, it expires 10 minutes after it's SENT. When I tried last night to change my address, I didn't even receive the code until nearly 20 minutes after I submitted the form, so I couldn't confirm the change. It worked fine when I tried again this morning. #ChangeOfAddress 🧵
LOL OMFG THEIR USER ON/OFF-BOARDING IS STILL THIS FUCKED? I ran into something similar YEARS ago! I don't recall "sinch" so probably before that.
They *really* don't want you to add automation users, or really do anything other than buy more user slots from them. It was a royal pain trying to remove myself from the environment and add the successor. It was such a pain that the successor said "fuck this" and dropped mailgun entirely.
@aspensmonster I mean, the thing is, their actual service is pretty rock-solid, and it's totally free for me at the volume I use it at (I route email for my private email server through it for domains which refuse to accept email directly from my server), and I'm not really sure there's anybody else with better service that's free, so I'm kind of stuck with them. But yeah, this really sucks.
@ripple I'm only up to L; the Yahoo entry in vault was named login.yahoo.com. I have been marking the items I couldn't change, so yes, when I'm done I'll be able to tell the ratio of successful to unsuccessful.
@wendyg Interesting! I've been at this for nine days now on and off (obviously not working on it continuously) and I'm only up to the j's in my alphabetical romp through my password manager. I've got 540 entries left to review and update as needed. When I started there were 1,262 entries in my password manager, so I guess I'm more than halfway through. Because I've been cleaning up cruft throughout this exercise, my password manager is down to down to 1,084 entries.
Yikes, that's a lot of passwords! I continue to be irritated by the requirement to set a password in contexts where it really doesn't matter (like reading a news site).
@wendyg 🤷 when you use a password manager, accounts are cheap to create and you can just forget about them afterward until you need them again. ...until you decide that you need to go through all 1,200+ of them and change your email address for privacy reasons. It's worth noting one reason I have so many is I refuse to use "Login with Google", "Login with Facebook", etc. for the same reason why I maintain my own email domain: I don't want to be dependent on another service when I can avoid it.
Oh, yeah, like you I've been around long enough that the single log-in mediated by a 3rd party was obviously a dumb idea even when it started. And as you say, having your own email domain eliminates a lot of issues.
@bhawthorne Brian, I've worked in infosec for more than 30 years, how likely do you think it is either that I didn't confirm the login page was legitimate before logging in, or that I don't have my accounts properly secured? If you follow me then you _know_ that I work in infosec. Please don't insult my intelligence. Jeeze.
After I changed my email address in the #NJTransit ticket app, they sent me an email message ➡️ 23 minutes later ⬅️ confirming the change. Then they sent a second, duplicate email two minutes after that. Both of these emails were sent to the new email address on my account; they did not sent a notification email to the old address. *sigh* #ChangeOfAddress 🧵
When I attempted to log into my #Nextdoor account (which, to be clear, I do not use anymore and have no plans to use again because Nextdoor is a cesspit) to change my email address, it claimed that it was sending a login code to my email address to complete the login, but the code email never arrived. Par for the course for Nextdoor, I suppose. #ChangeOfAddress 🧵
Over at #Cisco #OpenDNS (opendns.com/), when I enter a new login email address, it says it's sending me an email message to confirm the change, and indeed it does send the email, but clicking the confirmation link doesn't work. I tested this with non-anonymized addresses, not just an #AnonAddy address, so apparently this functionality is simply broken. Way to go, Cisco! #ChangeOfAddress 🧵
I tried to change my email address at pushover.net. It said it was sending a verification email, but it never arrived. I clicked the link to generate another verification email, and it again said it was sending it, but it never arrived. Instead, I received a "Welcome to Pushover!" email to my _old_ email address, the one I'm trying to change. *sigh* #ChangeOfAddress 🧵
Over at intuit.com/, which is notoriously bad at account management, after I changed my email address the page displaying it asserted that the new address was "Verified" even before I clicked on the link in the confirmation email. Browsing away from the page and back to it didn't change this. It only changed to "Not verified" when I used the browser refresh button to reload the page. Such an easy thing to get right, so embarrassing that they got it wrong. #ChangeOfAddress 🧵
Not to be outdone by Intuit, salary.com/ said on login that my password was expired and had to be changed (bogus!), but then it wouldn't allow me to change my password because the password change form enforces current password validation rules (must have a special character) on my _old_ password even though it was created so long ago that those rules were not in effect. I had to do "Forgot password?" to change it. Why are software developers so bad at their jobs? #ChangeOfAddress 🧵
#TransAmerica wins the prize for the worst pointless #SecurityTheater I've encountered while anonymizing my online account email addresses. I had to: * enter an emailed code and answer a security question to log in; * agree to new terms, then enter another emailed code; * answer another security question to get to my profile page; and * type my new email address instead of pasting it (the "Don't Fuck With Paste" extension fixed that!). (continued) #infosec #ChangeOfAddress 🧵
(#TransAmerica security theater continued) After all that, they didn't require me to click a link sent to my new email address to confirm the change and prove that I had access to that mailbox! They did all that crap, and didn't do the one real, substantive security thing that should be done as part of an email address change. Unbelievable. #ChangeOfAddress 🧵
This is what happened when I tried to change my email address for my #PlaystationNetwork (#PSN) account to an #AnonAddy email address. I don't know whether this is specific to AnonAddy addresses or whether the address change workflow is broken in general. 🤷 I've said it before in this thread, but it bears repeating: web sites should not be blocking people from using anonymized email addresses for security and privacy reasons. #ChangeOfAddress 🧵
starbucks.com/ said the password in my password manager was invalid, so I did a password reset. When prompted to choose a new password I entered my current one, which it accepted and said my password had been changed. Once again, however, it wouldn't let me log in. So I went through the password reset process again, and this time specified a new password. Again, it said it worked. Again, it wouldn't let me log in with the newly changed password. 🤷 #ChangeOfAddress 🧵
ticketmaster.com/ let me enter a new email address, sent a code to my old email that I needed to enter to confirm the address change, then after all that popped up a message saying "We have temporarily disabled email address changes, if it's an emergency contact customer service" and reverted the address change. 🤦 #ChangeOfAddress 🧵
In the hour and 6 minutes since I changed my email address at uber.com/, they've sent me 10 identical "Jonathan, your Uber account email was updated" email messages, spaced apart by 4–11 minutes, all to my old email address rather than the new one. #ChangeOfAddress 🧵
verizon.com/ has separate "User ID" and "Primary email" fields, which seems silly since the User ID is required to be an email address. You have to change them separately even if they are both the same thing and you want them to be the same thing again after you change them. Verification works for the User ID just fine. But I requested several verification emails for the Primary email, and none of them arrived. 🤦 EDIT: Finally showed up 10 minutes later. #ChangeOfAddress 🧵
vimeo.com/ slightly limits what your account can do until you've verified your account email address. After changing my account email address to an #AnonAddy address, I've requested a verification email three times, and none of them have arrived. EDIT: The emails never arrived, but I opened a support ticket and their support people marked my address as verified instead of fixing the address verification problem. 🤷 #Vimeo #ChangeOfAddress 🧵
caremark.com/ is a doozy. My password manager said to log in using my email address as my username, which worked fine. When I went to update my email address in my profile, I saw that there was a separate username field with a random number as my username. I changed the username to something else, and logged me out and told me to log back in with my new username. Which... didn't work. I still had to log in with my email address. (continued) #ChangeOfAddress 🧵
(caremark.com/ idiocy continued) So I changed my email address, and then logged out and tried to log back in again, and I _still_ need to log in with my old email address, even though it is no longer displayed anywhere in my account settings. How do you even break things this badly? 🤦 Also, after I changed my username and email address, they sent me the attached email message. *sigh* #ChangeOfAddress 🧵
Trying to change my email address at discountfilters.com/ was a disaster, but if you read my blog you already know they're shady (blog.kamens.us/2024/01/11/buye…). I tried changing my address. They claimed they were sending a verification email but it never arrived. I then tried logging out and logging back in with the new address. They sent me an email with a link to "access your account." I clicked that link and it logged me into a NEW ACCOUNT with that address. 🤦 #ChangeOfAddress 🧵
transunion.com/ continues its pattern of being, like all the other credit reporting agencies, the worst. They sent me the below email after I updated my email address. One problem: it says I should call them if I didn't update my password, which I didn't, I updated my email address! Furthermore, if you try to change your username and your password at the same time on the account settings page, it falsely claims that the old password you entered is incorrect. 🤦 #ChangeOfAddress 🧵
Over at tripplite.eaton.com/, there's no way to edit the username / email address on your account. They've buried the "Delete account" button on the "Password" tab of the account settings pop-up for some inexplicable reason. And if you click the "Delete account" button, the message telling you that your request was submitted successfully is inserted onto a different tab of the pop-up so you don't see it unless you switch to that tab. 🤦 #ChangeOfAddress 🧵
Mission accomplished! I've reviewed the entire contents of my password manager and anonymized my addresses wherever it was possible and appropriate. Final statistics: I started with 1,262 items, of which I deleted 465 (37%)! I skipped 120 items of the wrong type, e.g., secure notes. I skipped 292 more items with good reasons not to anonymize . I anonymized 386 (76%) of the remaining 505. I was unable to anonymize 118 (23%) for various reasons. #infosec #privacy /end #ChangeOfAddress 🧵
@chksome Oh, yeah, a lot of sites got it right, but those are boring and mostly not worth writing about. 😉 I successfully anonymized nearly 400 sites, as I noted in the stats at the end of the thread. I also just published a long blog posting with more details about how I did it and the background about why people might want to: blog.kamens.us/2024/10/14/case…
P.S. Blog posting with background about why what I did is a good idea, and some alternatives for how to do it, as well as more details than I posted here about how I did it myself: blog.kamens.us/2024/10/14/case…
Addendum to my #ChangeOfAddress 🧵: I had no trouble changing my address at spirit.com (#SpiritAirlines), but afterward they started spamming me at the new address. This isn't surprising; several sites did that. What's different is that when I try to unsub from the Spirit #spam, it claims I'm already unsubscribed. After navigating their live chat for 20+ minutes about this, they opened an escalation ticket about it. The confirmation email says it could take up to 30 days for them to respond. 😡
@helplessduck Oh, I finished the anonymization project a week ago. This is just the long tail... it took me a week to realize what was going on with the Spirit spam.
P.S. I suspect I could have solved this by resubscribing to their spam, saving that setting, and then unsubscribing and saving the setting again. But I'm an old cuss and I want to see what they say about this obvious bug in their system, so I'm going to leave things the way they are for the time being and we'll see what happens.
Addendum: On Sep. 8 I asked Condé Nast to delete my data: federate.social/@jik/113104350… They finally got back to me today, nearly 2 months later, with this response: "Your request cannot be completed at this time. inactive subscriber" I believe the technical term for describing this response is "bullshit." That I am an inactive subscriber shouldn't prevent them from deleting my data. The whole reason why I asked them to is because I'm not an active subscriber so they don't need it! #ChangeOfAddress 🧵
Countless developers chose MongoDB when it was still Open Source, only to suffer the bait and switch to a proprietary license years later.
The way to show your love to developers is not through legal threats and vendor lock-in, but by providing them options. For this reason, we are working on bringing MongoDB back to #opensource.
![Screenshot of Yahoo account settings section entitled "Verification Methods / How we make sure it's really you"
Text:
"This is how we keep your account secure, help you get into your account if you're locked out, or contact you if we detect anything suspicious.
Recovery emails
[email blurred out for privacy]
Added: June 27, 2010
Status - Verified
This is your Yahoo account username, so it can't be removed."
["Add email" button]](https://social.trom.tf/photo/preview/640/15929602 "Screenshot of Yahoo account settings section entitled \"Verification Methods / How we make sure it's really you\"
Text:
\"This is how we keep your account secure, help you get into your account if you're locked out, or contact you if we detect anything suspicious.
Recovery emails
[email blurred out for privacy]
Added: June 27, 2010
Status - Verified
This is your Yahoo account username, so it can't be removed.\"
[\"Add email\" button]")
!["Verify Email address" dialog which says, "We sent a verification code to [address elided]. Please enter it below to continue. This code will expire 10 minutes after it is received."](https://social.trom.tf/photo/preview/640/16852322 "\"Verify Email address\" dialog which says, \"We sent a verification code to [address elided]. Please enter it below to continue. This code will expire 10 minutes after it is received.\"")
![Screenshot of email from Caremark. Big header: "Your Caremark.com Profile Was Updated"
Below that:
"Hi JONATHAN,
You have successfully updated the following profile information for your Caremark.com account:
[blank space, nothing listed]
If you did not make this change..."
I've drawn in a red arrow pointing at the blank space and written "Why is this blank? What did I change?" next to it.](https://social.trom.tf/photo/preview/640/16919994 "Screenshot of email from Caremark. Big header: \"Your Caremark.com Profile Was Updated\"
Below that:
\"Hi JONATHAN,
You have successfully updated the following profile information for your Caremark.com account:
[blank space, nothing listed]
If you did not make this change...\"
I've drawn in a red arrow pointing at the blank space and written \"Why is this blank? What did I change?\" next to it.")
Helsinki Python
in reply to Helsinki Python • • •🇫🇮 🐍 #HelPy livestream has started!
meet.google.com/mfa-ybkf-acp
meetup.com/helpy-meetups/event…
#Helsinki #Python #meetup