@grishka@mastodon.social avatar

grishka

@grishka@mastodon.social

Software developer from Russia who's almost lost faith in the modern IT. Used to work at VKontakte, then Telegram. Currently building my own fediverse project to save our online social lives from greedy corporations. Follow the progress: #smithereen

Also working on the Mastodon Android app.

Русскоязычный аккаунт — @grishka

This profile is from a federated server and may be incomplete. Browse more on the original instance.

thisismissem, to mastodon
@thisismissem@hachyderm.io avatar

Have just opened a pull request to enable OAuth 2.0 refresh tokens for Mastodon, which is a first step towards enabling expiration of access tokens, to increase security to best practices.

https://github.com/mastodon/mastodon/pull/27948

grishka,
@grishka@mastodon.social avatar

@thisismissem adding any kind of time component to authentication doesn't help with security at all. It just makes users angry because they see a login form AGAIN instead of something they want.

grishka,
@grishka@mastodon.social avatar

@thisismissem and by the way, in Smithereen, sessions will always be indefinite

grishka,
@grishka@mastodon.social avatar

@thisismissem well, it is a time component because you're using the current time in session management code to determine whether a session is valid or not.

This whole token refreshing thing feels like it just adds cumbersomeness for the sake of it. I've never understood it in APIs I had to work with.

I can understand very temporary (like, 1 hour) tokens for, for example, linking your account to a website. But indefinitely refreshable?.. Same end result as now, just more complicated.

grishka,
@grishka@mastodon.social avatar

@thisismissem sending access tokens to a third-party server in general is a big no-no, isn't it?

But if they do send and store them on their server, what's the difference? If the database leaks, the whole thing does — including the refresh tokens that allow obtaining new access tokens.

macrumors, to random
@macrumors@mastodon.social avatar

Humane Debuts $700 AI Pin With 'Laser Ink Display' https://www.macrumors.com/2023/11/09/humane-ai-pin/?utm_source=dlvr.it&utm_medium=mastodon

grishka,
@grishka@mastodon.social avatar

@macrumors just one question — how do they imagine this kind of device working in places where there are seasons and people wear jackets outside half the year?

grishka, to fediverse
@grishka@mastodon.social avatar

Wrote a tutorial article in Russian on building a bare minimum server from scratch:
https://habr.com/ru/articles/702724/

grishka, to fediverse
@grishka@mastodon.social avatar

0.6 is out! 🎉

And with it, the complete federation feature parity with Mastodon. New features include:

  • Direct messages
  • Privacy settings
  • Followers-only posts (from other servers)

grishka,
@grishka@mastodon.social avatar

@lewiscowles1986 oops. I added a tag but forgot that I also need a release 🙈

Mastodon, to mastodon
@Mastodon@mastodon.social avatar

New #Mastodon for Android update comes with lists and a reworked home tab. We won't stop until it's the best social media app on Android!

https://blog.joinmastodon.org/2023/10/mastodon-for-android-update/

grishka,
@grishka@mastodon.social avatar

@unnameduser @Mastodon thanks for pointing this out, it was a bug I didn't notice, now fixed.

macrumors, to random
@macrumors@mastodon.social avatar

What Not to Expect at Apple's 'Scary Fast' October 30 Event https://www.macrumors.com/guide/what-not-to-expect-apple-october-event/?utm_source=dlvr.it&utm_medium=mastodon

grishka,
@grishka@mastodon.social avatar

@macrumors what about the mini-LED 5K monitor though 🤔

w7voa, to twitter
@w7voa@journa.host avatar

The platform formerly known as will begin charging new users $1 a year to access key features including the ability to tweet, reply, quote, repost, like, bookmark, and create list, reports Fortune.
https://fortune.com/2023/10/17/twitter-x-charging-new-users-1-dollar-year-to-tweet/

grishka,
@grishka@mastodon.social avatar

@w7voa what a wonderful, fresh idea to run a once thriving social media platform into the ground even faster

grishka, to random
@grishka@mastodon.social avatar

Overall, how satisfied are you with these random popups in various Google products asking you how satisfied you are?

grishka,
@grishka@mastodon.social avatar

@kornel because even Google knows that Google sucks at chat apps and shuts them down in 3 years after launch

TechDesk, to tech
@TechDesk@flipboard.social avatar

If you’re a regular visitor to Apple’s App Store, you may likely soon notice an enhanced experience. According to The Verge, the company is bringing its powerful internal search engine to the App Store and other apps. Will it also use generative AI tools? https://flip.it/Oowjoh

grishka,
@grishka@mastodon.social avatar

@TechDesk

What corporations do about search: all this AI bullshit to 🤡improve search results🤡

What people actually want from search: SELECT * FROM apps WHERE MATCH(name, description) AGAINST('the exact search query the user entered') ORDER BY install_count DESC

grishka, to fediverse
@grishka@mastodon.social avatar

Are there any ActivityPub servers that implement and federate presence statuses for actors (online/offline)?

9to5Mac, to random
@9to5Mac@mastodon.online avatar

X CEO shows her iPhone’s Home Screen with her favorite apps – and X isn’t there https://9to5mac.com/2023/09/28/x-ceo-iphone-home-screen-x-isnt-there/?utm_source=dlvr.it&utm_medium=mastodon

grishka,
@grishka@mastodon.social avatar

@9to5Mac reminds me of how around the time I quit my job at VKontakte in 2016 because of the new management, there were some new hires whose account IDs were 200M+. Very very new accounts. I'm certain some of them signed up for the thing just because they had to, you know, use the product of the company they're working at. Also because all our internal communication was on VK itself. They used Facebook and Instagram for their personal stuff.

macrumors, to random
@macrumors@mastodon.social avatar

iPhone 15 Models Support USB-C to Ethernet for Faster Internet Speeds https://www.macrumors.com/2023/09/22/iphone-15-usb-c-to-ethernet/?utm_source=dlvr.it&utm_medium=mastodon

grishka,
@grishka@mastodon.social avatar

@macrumors today on "people plugging random USB-C stuff they have laying around into their new iPhones" lol

jerry, to random

Is anyone using the Mastodon app on Android having trouble logging into infosec.exchange or other mastodon instances, with the error that it "seems not to be a Mastodon server"?

I don't have android and it appears to be working fine on iOS

grishka,
@grishka@mastodon.social avatar

@jerry I tested on two different devices (Galaxy S9 and Pixel 4a) and was able to get as far as the login form that opens in the browser.

bengo, to fediverse
@bengo@mastodon.social avatar

No one should 'win' . The whole point of federation is to not have a winner, and to get away from this corporate mentality.

By doing so, we can all win, not just a few execs, companies, worldviews.

https://www.theverge.com/2023/4/20/23689570/activitypub-protocol-standard-social-network

grishka,
@grishka@mastodon.social avatar

@bengo but there's still a factor to consider that your feature set must intersect with microblogging and, in particular, the way Mastodon does things.

grishka, to random
@grishka@mastodon.social avatar

Happy programmer's day!

video/mp4

grishka, to fediverse
@grishka@mastodon.social avatar

Working on private messages in and I'm wondering how much sense CWs make for them. From Mastodon's PoV, "private messages" are just posts. They thus share all the same properties. In my implementation, however, messages are distinct from posts, both in the UI and in the database. In my UI I don't have anywhere to display that content warning as a spoiler without it being super awkward. I can use it as a subject line however 🤔

Any thoughts?

narF, to fediverse
@narF@mstdn.ca avatar

One thing the is missing is a functionality. Public groups, private groups.

So many people have told me: "I can't leave Facebook because my [knitting/school/yoga/…] group only uses to communicate. Sub- are groups. are groups. Group chat on or . We need groups on the Fediverse!

Well, good news: people are working on them! And it's apparently fucking difficult. But they are making progress!

https://wedistribute.org/2023/06/the-long-effort-to-bring-groups-to-the-fediverse/

grishka,
@grishka@mastodon.social avatar

@narF @kudra @leighms

Smithereen events are a subtype of group. You probably aren't familiar with VKontakte which I'm copying, but Facebook events are close enough to this too.

grishka,
@grishka@mastodon.social avatar

@kudra @narF @leighms what do you mean by how to search?

grishka,
@grishka@mastodon.social avatar

@kudra @narF @leighms
The search field is in the header. You can search for users and groups, and also load objects from other servers by pasting URLs in there. Hashtags aren't implemented nor planned — they don't fit into my vision of a place where you stay up to date on your friends' lives.

grishka,
@grishka@mastodon.social avatar

@kudra @narF @leighms nope, I don't intend to have text search either. I'm against any kind of global post search because, again, my vision is that you aren't supposed to be exposed to content from people you don't know. For the same reason there will never be the ability to post as a group, like there is in VK and Facebook.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • megavids
  • kavyap
  • DreamBathrooms
  • khanakhh
  • magazineikmin
  • InstantRegret
  • ethstaker
  • thenastyranch
  • Youngstown
  • rosin
  • slotface
  • osvaldo12
  • everett
  • ngwrru68w68
  • JUstTest
  • Durango
  • cubers
  • tester
  • GTA5RPClips
  • modclub
  • mdbf
  • cisconetworking
  • tacticalgear
  • Leos
  • normalnudes
  • anitta
  • provamag3
  • lostlight
  • All magazines
    •