haverholm

Originally posted to X, saved you a visit to IRL Finetime 👍

These episode descriptions all look like they're written by RTD or based off an interview with him, so ignore all "awesomest ever", "most thrillingly amazeballs" hype.

Another chill weekend listen: Fossils, "Flesh hammer" (2014)

Riffing off the high concept nature of the show, Davies mentions (with my emphasis):

a cartoon’s come to life, or we’re visiting the 803rd Interstellar Song Contest, or Boom Beasts have taken over London

Wait, what? The first two are previously announced episode briefs, but... "Boom Beasts"?

Did he just come up with that last bit on the spot or did I miss it in any of the advance promo copy?

Edited to add: Apparently they're Bone Beasts! (Spoiler warning)

RTD also praises the new writers this season:

Inua Ellams just to pick an example, set his episode in Lagos. He’s created a whole history of friendships for the Doctor around a whole new mythology. There’s that lack of fear. There’s not a second of worrying, of him thinking, ’Have they done this before? Did they do this in 1985?’ Although he’s always watched the show, he was completely free of its shackles. What you get is a completely new take on things you thought you understood in Doctor Who. The episode has the TARDIS doing things it’s never done before.

As I recall, getting the Doctor mixed in with African mythology was an explicit wish from Ncuti Gatwa coming in, and this looks like it could be a start.

Besides, frankly — what haven't we seen the TARDIS do yet? 🤯

So, what are you guys watching tonight?

Found this via Aurynn Shaw:

When following someone on a different server on the Fediverse, the remote server decides whether you are allowed to do so. This enables features like private accounts. Due to an implementation mistake, Pixelfed ignores this and allows anyone to follow even private accounts on other servers. When a legitimate user from a Pixelfed instance follows you on your locked fediverse account, anyone on that Pixelfed instance can read your private posts. You don’t need to be a Pixelfed user to be affected.

Pixelfed admins should update to v1.12.5 ASAP, but upgrading can be a major hurdle.

Importantly, your Mastodon or GoToSocial instance isn’t handing your private posts to any random server, just because it asks. The problem only becomes apparent when you have at least one legit accepted follower from a Pixelfed server. Now that server is allowed to fetch all your private posts. And when it knows the posts, it has to decide who to show them. When you accept a follower, you not only place your trust to keep a secret on them, but also on their admin and the software they are running.

Edited to add the last block quote.