ipg,
@ipg@wetdry.world avatar

so on , rather than going with the well-documented and defined webfinger protocol, behind the .well-known directory, decided to make their own shit for verifying domains via HTTP.

thus, somebody took the S3 bucket name "xrpc" and now is s3.amazonaws.com on the platform

going great

https://bsky.ipg.gay/profile/s3.amazonaws.com/post/3juud6zh5ur2n

screenshot of a Bluesky post where somebody has taken the domain s3.amazonaws.com, saying "Hello it's me your good friend Amazon S3" earlier in the thread, somebody with a domain ending with translate.goog is saying "I wonder who's gonna be the first to get a handle on a domain they don't actually own..."

mistakenotmy,

@ipg What type of handle do people get who do not have access to a domain?

I havn't had the change yet to play with , still waiting for someone to give an invite to a mere mortal like me.

ipg,
@ipg@wetdry.world avatar

@mistakenotmy @[username].bsky.social

mistakenotmy,

@ipg So in some cases the handle indicates the instance you are on, in others it's just some "validated domain"?

markrprior,
@markrprior@ohai.social avatar

deleted_by_author

    •
    mistakenotmy,

    @markrprior @ipg yeah that is exactly what confuses me. When I looked at the screenshots from I thought it indicates the instance one is on.

    Well, if I ever get an invite I will take a more detailed look, but they might want to change this before they open up to the wider public.

    arsonatdennys,

    @markrprior my understanding is identities are fully portable across instances and persist even as you move to a different instance which is why a domain name handle doesn't include the instance.

    markrprior,
    @markrprior@ohai.social avatar

    deleted_by_author

    •
    arsonatdennys,

    @markrprior how is that an abuse??

    markrprior,
    @markrprior@ohai.social avatar

    deleted_by_author

    •
    arsonatdennys,

    @markrprior ohh but you can have subdomains too!

    markrprior,
    @markrprior@ohai.social avatar

    deleted_by_author

    •
    arsonatdennys,

    @markrprior oh what’s yours!

    markrprior,
    @markrprior@ohai.social avatar

    deleted_by_author

    •
    arsonatdennys,

    @markrprior ooh I see. I followed you, we need more photography :)

    whynothugo,
    @whynothugo@fosstodon.org avatar

    @ipg I wonder why they didn't use a well-known URL for their well know endpoint.

    jox121,

    @ipg I dont get It.

    opendna,
    @opendna@mastodon.sdf.org avatar

    @jox121 @ipg So insecure by design that some random claimed ownership of Amazon cloud services.

    hee_nalu,

    @opendna @jox121 @ipg Chaz actually works for AWS in Security. Not so rando. 😂

    mars,

    @ipg so far I've seen this, cross site scripting, and a literal fucking @everyone

    jesopo,
    @jesopo@chaos.social avatar

    @mars @ipg in fairness the @ everyone only mentioned 501 people

    mars,

    @jesopo @ipg only 😭

    jesopo,
    @jesopo@chaos.social avatar

    @mars @ipg it could be so much worse and i look forward to someone figuring out how to make it so much worse 😌

    patterfloof,
    @patterfloof@meow.social avatar

    deleted_by_author

    •
    jesopo,
    @jesopo@chaos.social avatar

    @patterfloof @mars @ipg not quite

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • internet
  • rosin
  • thenastyranch
  • anitta
  • normalnudes
  • GTA5RPClips
  • DreamBathrooms
  • mdbf
  • magazineikmin
  • Youngstown
  • ngwrru68w68
  • slotface
  • InstantRegret
  • kavyap
  • cubers
  • tester
  • cisconetworking
  • provamag3
  • modclub
  • everett
  • osvaldo12
  • khanakhh
  • Durango
  • Leos
  • megavids
  • ethstaker
  • tacticalgear
  • JUstTest
  • lostlight
  • All magazines
    •