fun trick: if someone gives a hosted LLM a skill that lets it fetch web pages (directly, not through some third party scraper service) and it's hosted on AWS, you can often trick it into fetching data from the AWS instance metadata server (IMDS) at 169.254.169.254 / [fd00:ec2::254]. the higher end models tend to refuse if you give the IP, but you can just spin up a domain with A/AAAA records pointing at that IP and request that instead. if IMDSv1 isn't disabled you can get secrets out of it.
As part of the hardening effort, and because ActivityPub is âbasically emailâ, I propose Sharkey should switch to federation over SMTP only 
@kemona_halftau <Multi_key> <minus> <minus> <period> : "â" U2013 # EN DASH (from the default /usr/share/X11/locale/en_US.UTF-8/Compose on Alpine)
@CinnamonCatYurilover @kemona_halftau there are also some alternative frontends but the two mastodon ones (masto-fe and fedibird-fe) available in the frontend package manager thing are very outdated and broken and pl-fe nicolium (a soapbox fork) I couldnât get to work at all