Posts
35
Following
Hidden
Followers
Hidden
(profile pic is a red toaster with bread in it)

just a toaster on the internet, trying to be the best they can be!
please tell me if i say or do anything wrong

feel free to send a follow request! i'll accept if ya seem cool, just know that i boost a lot

i put alt text on my posts, but may boost some without it. sorry about that!

i also try my best to keep my posts and boosts properly cw-ed. please let me know if something slips through

#noai #nobot (sentient ones are fine here dw)

the .social accounts are only there because i haven't gotten around to migrating them yet

Neodog with Glasses Plushie neodog_glasses

What’s with kids who are like 14 years old and like anime or plushies or whatever. Go care about something more age appropriate like carpentry or rockabilly instead of appropriating millennial culture

0
1
3
mh-, disorder, help appreciated
Show content

hey fedi, how do i not be a horrible person? <small>(for context, when i was younger, i was diagnosed with oppositional defiant disorder, and i’m pretty sure those behaviors are ones i still exhibit until today (probably doesn’t help that i rarely ever socialize))</small>

0
2
0

Maxine Naomi Walters I ✦

yo chat check out my setup 🔥

0
3
1

Maxine Naomi Walters I ✦

1
3
2

gamer entertainment system (GES)

look i don’t care if ur classes are suspended or not if the heat index is 46C don’t fucking go to class if you can’t survive that

0
1
2
Maoist Standard Sign Language
0
1
5

boost_requested send me your favorite artists please i wanna look at cool art especialyl gay furries

1
3
2

boost Hi! I’m planning on escaping my current place to move to a safer location with friends, where I’d be able to actually live my life.

For that I need around 600 euros to cover travel expenses and food for the time it’ll take me to find a job and stable housing, for the first month. I’m planning on leaving first week of April, but this may change.

Goal: 85/600 euros

If you don’t want that money to be lost forever, you can lend me money and I’ll make sure to refund you whenever I’m able to. That’d be very appreciated. No matter what, every cent I get through this will be invested back into mutual aid again once I’m out of this mess.

Thank you so much for your help, it helps me so so much! <3

XMR: 48xs4QpbS6DhzR1gKg3HEEWfhAm3f7VD9XYAZriAkykcheRtKfKu6Eqj5wysquqgE25i2QQPewo9qYQZL1qtKPR6JE1AKXP

https://liberapay.com/tasiaiso/

https://ko-fi.com/tasiaiso/

IBAN: FR76 1390 6000 0400 1941 3656 074

ETH: 0x55C578E2b588C4617CEd436A7fcC9392a0ebe0A5

BTC: bc1qxqvnzt5xw6fr78czptzsn67a9qcanf5smdx9v4

#mutualaid #mutualaidrequest #transcrowdfund #transmutualaid
@mutualaid @crowdfunding

2
29
3
cursed art idea
Show content

fursona with all its fur shaved off

0
1
0

come the fuck on

4
25
14
Edited 3 days ago

The domain mirage.foxb612.com and IP address 65.108.53.178 have been blocked (defederated) from Enby.Life. These are part of a fediverse crawler system that indexes servers based on the country where they are physically located. This wouldn’t normally be against our rules, but the crawler goes to great lengths to de-anonymize instances, including sending fake-signed ActivityPub probes to obtain the server’s true IP address. Requests from the crawler use a web browser’s User Agent to evade filters, and documentation on the website mentions that CloudFlare bypasses are also in use.

Given the complexity of setting up something like this, we believe that the crawler is likely operating with bad intentions. While there could be some use for an index of instances based on community region, tracking the actual physical location of the server backends is highly suspicious. I’d encourage all instance admins to consider whether something like this poses a threat, and to take appropriate action.

For anyone interested in going beyond a simple domain block, please see these log excerpts typical of being crawled via AP probes. Logs are taken from a non-standard Sharkey deployment and may not directly translate to other software, but I’ve tried to include as much detail as possible anyway.

Sharkey admins can check whether you’ve been scanned by searching for backend log patterns like this (make sure to replace your instance hostname where appropriate):

Feb 17 20:10:21 campsite run-sharkey.sh[241576]: INFO *        [apserv sigcheck]        req-yzi /users/9fpwmts9tv (by Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0) apparently from mirage.foxb612.com: we don't know the user for keyId https://mirage.foxb612.com/kiite/key/enby.life/1739823020/NHc8pVYoNGmLk3My/main-key, trying to fetch via https://mirage.foxb612.com/kiite/key/enby.life/1739823020/NHc8pVYoNGmLk3My/main-key

Alternately, anyone with Activity Logging in place can check for AP fetch errors like this:

id,at,duration,host,request_uri,object_uri,accepted,result,object,context_hash
a4n23pddff,2025-02-24 20:10:24.433000 +00:00,894.86,mirage.foxb612.com,https://mirage.foxb612.com/kiite/key/enby.life/1740427823/Y93ZjgZHZlxNSuxa/main-key,,false,Error: invalid content type of AP response - content type is not application/activity+json or application/ld+json: https://mirage.foxb612.com/kiite/key/enby.life/1740427823/Y93ZjgZHZlxNSuxa/main-key,,

A final indicator is reverse-proxy logs showing this domain as part of an HTTP Signature header. Here’s an example from our Caddy server:

Feb 24 20:10:25 campsite caddy[916]: 2025/02/24 20:10:25.329        ERROR        http.log.access.log0        handled request        {
  "request": {
    "remote_ip": "65.108.53.178",
    "remote_port": "53964",
    "client_ip": "65.108.53.178",
    "proto": "HTTP/1.1",
    "method": "GET",
    "host": "enby.life",
    "uri": "/users/9fpwmts9tv",
    "headers": {
      "Accept-Encoding": [
        "gzip, deflate"
      ],
      "Accept": [
        "application/activity+json"
      ],
      "Connection": [
        "keep-alive"
      ],
      "Content-Type": [
        "application/activity+json"
      ],
      "Date": [
        "Mon, 24 Feb 2025 20:10:23 GMT"
      ],
      "Signature": [
        "keyId=\"https://mirage.foxb612.com/kiite/key/enby.life/1740427823/Y93ZjgZHZlxNSuxa/main-key\",algorithm=\"rsa-sha256\",headers=\"(request-target) host date\",signature=\"5umGzjOXHeV8DdI4NjQqwbag6ChMKYS6\""
      ],
      "User-Agent": [
        "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0"
      ]
    },
    "tls": {
      "resumed": false,
      "version": 772,
      "cipher_suite": 4865,
      "proto": "http/1.1",
      "server_name": "enby.life"
    }
  },
  "bytes_read": 0,
  "user_id": "",
  "duration": 0.901198418,
  "size": 254,
  "status": 500,
  "resp_headers": {
    "Date": [
      "Mon, 24 Feb 2025 20:10:25 GMT"
    ],
    "Access-Control-Allow-Origin": [
      "*"
    ],
    "Alt-Svc": [
      "h3=\":443\"; ma=2592000"
    ],
    "Content-Type": [
      "application/json; charset=utf-8"
    ],
    "Strict-Transport-Security": [
      "max-age=15552000; preload"
    ],
    "Access-Control-Allow-Methods": [
      "GET, OPTIONS"
    ],
    "Content-Length": [
      "254"
    ],
    "Access-Control-Allow-Headers": [
      "Accept"
    ],
    "Server": [
      "Caddy"
    ],
    "Access-Control-Expose-Headers": [
      "Vary"
    ],
    "Cache-Control": [
      "private, max-age=0, must-revalidate"
    ]
  }
}

#FediBlock #BlockRecommendation #Moderation #Crawler #Scraper

RE: https://enby.life/notes/a4vj8c2xq1

8
22
5
diapers, pee, boosts ok obviously
Show content

I’ve been discussing doing this in private posts so… I guess I’ll post this now and start this weekend neocat_blush_hide

1 boost to this post = 1 day I can pee only in my diapers

rules:

  • I can also piss my pants (because….it’s fun)
  • I won’t be wearing diapers in cases where I anticipate I might end up naked with someone else, to not kill the mood
  • in the case above, I’ll still make all possible efforts to try and not go until I can be in diapers again. if that can’t be achieved and I end up using the bathroom, that day won’t count towards the remaining days
1
5
2

it should get paid to maintain infrastructure and allowed to use nixos on all servers neobot_bottom

in unrelated news: it is looking for a job and will happily send you its CV as long as no entities involved ask too many questions how it knows all the shit it knows neobot

0
4
1
long (if it gets cut off view on my instance), confession, actually not a shitpost, i'm so sorry fedi, can y'all help me out with this pretty please
Show content

hey, fedi
i have some pretty horrible confessions to make…

-i haven’t really played games in years now
-i haven’t watched much tv shows and movies lately
-i haven’t been listening to music as much as i’d want to
-i haven’t been looking at and appreciating general art as much as i’ve used to
-i’ve haven’t really coded anything since i was a child i think (which actually isn’t all too long ago all things considered but still years ago)
-…and there’s so many other things my brain kinda just shutoff rn

…and i really wanna change all that! i wanna do shit again!

so, could it be possible for fedi to help me out? i genuinely don’t know where to start!

even if you have a hobby or interest that may be considered weird or niche or whatever, please don’t hesitate to reply! when i was younger i was pretty in to elevators and stuff like that :3

2
2
0
akkoma 2025.03 stable has been released!

https://meta.akkoma.dev/t/akkoma-stable-2025-03-artsy-dashboardy/831

featuring real MFM support and a cool dashboard

it's a security release as well btw :)
11
27
12

It's honestly laughable how we went from an era where the only universally agreed upon bad browser was IE, and now we're at a point where there isn't a universally agreeable good one

1
3
2

Windows terminal in 2025

2
52
28
Hey @mozilla if you want money then you should stop paying your ceo millions of dollars and start paying your devs more you fuckers
0
2
2
Show older