shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

290
active users

#API

6 posts5 participants1 post today

Here's a fun fact. You don't need to pay for the Twitter API if you know the post you want to retrieve.

The Twitter embedding service provides a fully inflated JSON response. It includes parents to replies, quote posts, links to media, total number of likes, retweets, replies, etc.

Here's an example of someone replying to me:

cdn.syndication.twimg.com/twee

You need to add a token to the end, but it can be any random string. No other restrictions.

Very useful for archiving.

Replied in thread

@walkinglampshade @jrredho @fj It's basic #InfoSec, really:

Thus #Signal fails at protevting #Journalists and theor sources because they do have that data and can be #subopena'd for it if they don't already provide #BulkSurveillance & #LawfulInterception #API|s to comply with #CloudAct. (Or are you guys so naive and believe @Mer__edith will risk dying of old age in jail for non-paying users?)

  • This entire "thread vector" just doesn't exist with #XMPP+#OMEMO nor #PGP/MIME!

And if you believe "this won't ne used/abused me because I'm from 'Murica!" and point at #ANØM as an example, then you really ignored all tze #Cyberfacism since 9/11…

Twitterthaddeus e. grugq on Twitter“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”

Garage - An open-source distributed object storage service

Does any of you know about this and also use it professionally and if so in what context and how? Honestly, I'm standing up a little.

📦 garagehq.deuxfleurs.fr

garagehq.deuxfleurs.frGarage - An open-source distributed object storage serviceAn open-source distributed storage service you can self-host to fullfill many needs.
Replied in thread

@expertenkommision_cyberunfall @dideldum @leachimus @EUCommission @BaFin @ecb

Dass dies technisch möglich ist - inkl. Einhaltung von #Identifikationspflichten (#KYC) und #Geldwäscheprävention (#AML) beweisen Zahlungsdienstleister wie #NowPayments regelmäßig!

  • Natürlich sollte hierzu eine öffentliche, kosten- und patentfreie #Europanorm geschaffen werden, welche entsprechende #API|s definiert, inklusiver verpflichtender #Testing-Endpoints.

Und natürlich nicht mit irgendwelchem #Blockchain-Müll, dafür #dezentral, #P2P mit Förderation (vgl. Fediverse)...

  • Dazu dezentrale Architektur mit "Web of Trust" um effektiv Missbrauch und Akteure dessen zu bekämpfen.

Die Technologien dazu existieren...

Replied in thread

@kuketzblog das größte Problem si d #Zahlungsdienstleister.

  • Wer mit mit "#wero statt #PayPal!" kommt, kauft offensichtlich nirgendwo online ein und außerhalb der #EU ist dies genauso wie #SEPA keine Option, sondern allenfalls lokale Nische alla #AliPay / #WeChatPay und nicht global verfügbar.

Merke: rein regionale oder gar nationale Lösungen sind keine Alternative zum #VISA / #MasterCard / PayPal - #Tripol und sowohl #Stripe als auch #Klarna sind nicht wirklich konkirrenzfähig.

Eher werden wir #Monero als #Zahlungsmittel beim Durchbruch in den globalen Mainstream sehen!

»KI-Trainingsdaten – Tausende gültiger API-Keys in gecrawlten #Web-Daten entdeckt:
Bei der Analyse eines frei verfügbaren #Archiv's mit rund 400 TBytes an #Website #Daten haben Forscher fast 12.000 gültige #APIKeys und Passwörter gefunden«

Nein!!! Ob dies nun die #KI (Automatisierung) oder/und "#Hacker" nun knacken spielt keine Rolle. #API-Keys wie #Passwort'er speichert man nicht im #Code als #Klartext direkt. Dies ist absolut dilettantisch und macht mensch nicht.

🤦 golem.de/news/ki-trainingsdate

Golem.de · KI-Trainingsdaten: Tausende gültiger API-Keys in gecrawlten Webdaten entdeckt - Golem.deBy Marc Stöckel

I’ve recently taken a closer look at the #Foursquare #API (updating the long unmaintained Platypush plugin, details on why coming soon).

At first their new API versioning schema seemed a bit confusing (why would anyone use arbitrary YYYYMMDD strings as versions?), but a closer look at how they implemented it revealed a quite clever design decision:

Versioning is controlled by the v parameter, which is a date that represents the “version” of the API for which you expect from Foursquare. It is designed to give developers the freedom to adapt to Foursquare API changes on their own schedule. The value of the v parameter is a date in YYYYMMDD format that lets you tell us “I’m prepared for API changes up to this date.”

You know when you look at an engineering decision that is so elegant and obvious that you think “damn, how could nobody think of this before?”

Nearly two decades spent managing /v1, /v2, /v2.5, /v2.almost3, /v3, managing migrations and deprecations, documenting breaking changes, introducing exponentially thicker layers of schemas and converters, and the obvious solution was just there under our nose.

Why don’t you just start with defining the base schemas of your API objects at the time of their first release, and then every time you add, modify or delete a field, or change some return type, or add a value to an enum, you just version the change with a timestamp?

Let the developer say “I understand the language that your API spoke 3 months ago”, and you just dynamically create the schemas, GraphQL or ORM snippets to parse requests and responses as of that date.

No more breaking changes. No more forced migrations. No more boilerplate to explicitly convert payloads across different API versions.

You construct the response by first applying the base schema, and then gradually patching it - just like you would do with a git rebase, or an ORM migration tool.

A downside may probably be that you can never really delete a column from the db if it was ever used by any version of your API.

And a challenge may also be to adapt tools like #OpenAPI / #Swagger that were designed around static schemas to also work with “dynamically versioned” selections.

But to me the problems it solves far outweight the downsides.

https://docs.foursquare.com/developer/reference/versioning

DeveloperVersioningVersioning is controlled by the v parameter, which is a date that represents the "version" of the API for which you expect from Foursquare. It is designed to give developers the freedom to adapt to Foursquare API changes on their own schedule. The value of the v parameter is a date in YYYYMMDD forma...

I'm disappointed to learn that #Suunto is just as bad with its #API access as #Garmin. :(

"We currently don't offer the API access for personal use. We are reviewing the applicants based on for example the fit to our brand [...]"

Is there a brand with decent #running watch and open enough data policies?

Werden Sie auch öfter gefragt, was eine API ist?

Eine API (Application Programming Interface) verbindet Softwaresysteme und ermöglicht den Datenaustausch. Sie definiert, wie Anwendungen miteinander kommunizieren und erleichtert Integrationen.

Bei mailbox.org automatisiert die API z. B. die Benutzerverwaltung für Geschäftskunden.

Wir haben es simpel in einem Vergleich zusammengefasst. Haben Sie auch ein Beispiel, das jeder versteht?