I'm somebody who's written rather extensively on generative AI ethics, and I feel there is a lot that is unethical about the current corporate climate and culture surrounding the technology. And when I write about LLMs and chatbots, I'm careful not to make judgments about the people using the end products—I don't think you're a bad person if you use ChatGPT or Claude, or whatever. What I'm discussing today is different. There is no room for debate or argument, here—only hard, absolute lines in the sand. Much of the world has become far too complacent and complicit with people (and their companies) who proclaim and hold far-right, fascist ideology. These are not image boards residing in the fringe corners of an anonymous Internet made up of people who have slipped through the cracks. No, these are wealthy people in power who are blatant and shameless in their support for those who continuously beat the drum of bigotry, xenophobia, transphobia, and cynical accelerationist hatred. Open source technology has become a culture safe for this rhetoric and ideology, with millions of dollars being invested to continue this status quo. You need to be made aware of this, and then you need to be vocal and take action. ## DHH David Heinemeier Hansson is the most well-known figurehead here. He is the creator of Ruby on Rails, CTO of 37signals, and a Shopify board member. In September 2025, DHH published "As I remember London", mourning that London is "no longer full of native Brits"—a claim that redefines "native Brit" to mean "white." Developer Jake Lazaroff details how DHH describes a Tommy Robinson march as "heartwarming," where speakers called for "remigration" (a euphemism for the ethnic cleansing of non-white residents) and one speaker demanded that countries "ban halal," "ban mosques," and "ban temples." DHH invokes abuse scandals to bolster his white-nationalist rhetoric, framing non-white men as predators of "British girls," while UK data shows no such racial skew. LibreNews reaches the same conclusion. Developer Joel Drapper wrote how Ruby Central had lost a $250,000-a-year sponsorship from Sidekiq after giving DHH a speaking slot at RailsConf a few weeks later, leaving the nonprofit financially dependent on Shopify (where DHH sits on the board); Shopify then pushed Ruby Central to consolidate control rather than lose its funding. The Register and Heise both covered the fallout. But none of this has cost DHH money—if anything, he's only gained. A few weeks ago, DHH announced the Omacom Foundation to bankroll his Linux distribution, Omarchy, which is nothing more than a few vibecoded scripts on top of Arch Linux. There are twelve "Founding Patrons" pledging a million dollars apiece: * Tobi Lütke, CEO of Shopify * Patrick Collison, CEO of Stripe * Michael Dell, Chairman and CEO of Dell Technologies * Jack Dorsey, Block Head and Chairman of Block * Matthew Prince, CEO of Cloudflare * Brendan Iribe, Cofounder of Sesame and Oculus * Jason Fried, CEO of 37signals * Drew Houston, cofounder and co-CEO of Dropbox * Peter Steinberger, creator of OpenClaw * Brian Armstrong, CEO of Coinbase * Yunjie Dai, cofounder of TapTap * DHH himself. And these corporations are each contributing $100,000 a year for three years: * 1Password * 37signals A dozen of the most powerful executives in tech looked at a man who wrote that a British march calling for the deportation of non-white citizens was "heartwarming," and decided he was the person they wanted to hand a multimillion-dollar foundation to. I should also mention that the same infrastructure companies bankrolling Omarchy and Ladybird are also the backbone of the ongoing violence of U.S. deportations. This includes Amazon's AWS contracts powering ICE, Palantir building ICE's case-management system, and the use of Salesforce's tools. ## "Apolitical" Andreas Kling, founder of the Ladybird browser project (itself an Omacom-adjacent beneficiary, sponsored by Cloudflare, FUTO, Shopify, 37signals, Proton, and JetBrains), built his project's identity around refusing a documentation patch that would have made SerenityOS's manuals gender-neutral, on the grounds that gender-neutral language was "personal politics" that didn't belong in a technical project. Blogger Kate Vibber wrote how that became Ladybird's official contributing guidelines, which now bar "discussions on societal politics" outright—a policy treating the mere existence of trans contributors as more "political" than excluding them. In 2026, Kling posted in support of Charlie Kirk after Kirk's assassination and, per discussion on Lobsters, bristled at being called a fascist for it—a reaction hard to square with "apolitical," since Kirk was a movement figure who, per his own Wikipedia entry, promoted the "white genocide" conspiracy theory and criticized the Civil Rights Act. Vaxry, the developer behind the Hyprland Wayland compositor (another Omacom-funded project), was banned in 2024 by Freedesktop.org's Code of Conduct team over a pattern of the Hyprland Discord enabling harassment of trans community members, including an incident where moderators changed a trans user's display name to strip their pronouns. Vaxry's own public response framed the ban as ideological overreach by "social justice warriors," while the Freedesktop side, recounted at LibreNews, describes over a year of private attempts to get him to address the toxicity before going public. Hyprland's contributing guidelines now ban "political" speech too. Enrico "metux" Weigelt forked the deprecated Xorg server into Xlibre as a rebellion against a "RedHat DEI" conspiracy he believes exists. The founding document of the project was a rant about big-tech diversity initiatives, and its code of conduct is a text file that just says "404." FUTO is a funder of Immich and is run by Eron Wolf, a friend and platformer of Curtis Yarvin, the "dark enlightenment" writer whose ideas about dismantling democracy have now found purchase in the current U.S. administration. Brendan Eich, Mozilla's co-founder and now Brave's CEO, used Brave's infrastructure to give payments to Kiwi Farms, a forum whose harassment campaigns have been linked to multiple suicides. We witness the same pattern over and over. A tech project is declared "apolitical," and defines any accommodation of marginalized contributors as a political act, and keeps the actual politics of the maintainers—nostalgia for ethnically white homogeneous cities and hostility to gender-neutral pronouns—off the table entirely. Because that's just, you know, how they feel. "Apolitical" has never meant a lack of politics. It's meant politics that current power doesn't have to defend. ## The Throughline We have been watching the fragile fury of white masculinity and hate metastasize and fester over the years, from Gamergate's harassment campaigns through years of anti-SJW cringe compilation content mills, the marking of Antifa as the enemy, the tantrum-throwing #AllLivesMatter movement, and the manufactured panic over DEI and "wokeism." You are not living in the neoliberal-Obama era where basic compassion and empathy are the default anymore. And you haven't been for a long time. Despite their cries about censorship and deplatforming, and despite their persecution fetish, these people are not on the fringe. They have board seats and sponsorships and multimillion-dollar foundations. It is no coincidence this is occuring as companies and brands return to X, as the United States votes at a Midterm election being interfered with by a sitting president, as conservatives normalize the far-right in Europe politics and culture. If you want a more thorough and longer list of people, companies, and products, then I recommend reading up on Devine Lu Linvega's Fashware list on Sourcehut, as well as Drew DeVault's list of Weird Little Guys. You may be in a position where the specific harms and rhetoric being spewed are not aimed at you, and you may have been coaxed into viewing what I'm saying here as overreaction, or as a rabid, self-righteous screed. Millions of dollars have been spent to ensure this, and it could not be further from the truth. We cannot afford to continue to shrug off the presence of these people and their projects in open source. A united stand must be taken. **Speak up on this**. Boycott aggressively. Let people know you don't support Cloudflare, Shopify, 37signals, Dell, 1Password, Framework, Block, Coinbase, Dropbox, TapTap, and any other company enabling the spread of dangerous and harmful political ideologies that will continue to result in further violence and death. And let people know the harm these companies are actively doing. We cannot allow this to continue; we must be far more proactive and assertive in our fight against the normalization of fascism and the far right. We must be willing to sacrifice ease and convenience, and we must be willing to sever all connections with these entities. It is our only way forward.

We just released Mastodon 4.7.0! This version contains very few user-facing changes, but significantly reworks the backend code to improve security and support new protocol features. You can read more about it on our blog: https://blog.joinmastodon.org/2026/08/mastodon-4.7/ Note for admins: the database migrations might take a long time, this is expected (see the release notes). Release notes and upgrade instructions are available here: https://github.com/mastodon/mastodon/releases/tag/v4.7.0 #mastoadmin

Comments

An out-of-bounds write vulnerability in FFmpeg's...

In 2023, Niléane created Tangerine UI, and it is 100% the best UI for Mastodon out there, and honestly, I think it should have been made the default theme by now. That's why I was sad to hear that she was no longer maintaining the project last week. It

RFC 10008 is brand new a specification detailing the new HTTP method called QUERY: _This specification defines the QUERY method for HTTP. A QUERY requests that the request target process the enclosed content in a safe and idempotent manner and then respond with the result of that processing. This is similar to POST requests but can be automatically repeated or restarted without concern for partial state changes_ ## A GET with body For all practical purposes you can think of QUERY as a way to send a GET with a body. It looks exactly like POST, but done with another verb. Contrary to POST, QUERY requests are _idempotent_ – they can be retried or repeated when needed, for instance after a connection failure. ## curl it You can use curl to do HTTP requests with QUERY just fine. curl offers the `--request` option (also known as -X in the short form) that you can use like this: curl -d "data to send" -X QUERY https://example.com/ ## But redirects! There is one little caveat to remember with this curl option that changes the method. When _also_ asking curl to follow any possible redirects, it is important that you use a new enough curl version because you want the `--follow` option. **Not** the old `--location/-L` one. Why? Because the old option changes the HTTP method on all subsequent requests independently of what the server responds, which in many cases is not what you want. The newer `--follow` option instead acts according to what the HTTP response code suggests in should do. Stick to the same method again, or maybe switch to GET in the following request. ## Why? Why or when would you use this? First of course you only want to use this if the server supports it, but the spec offers some reasons why this might be a good choice: * avoid or circumvent URL size limits. Somewhere around 8000 bytes they start to no longer work reliably because servers and intermediaries set limits. * expressing certain kinds of data in the URL is inefficient because encoding overhead * URLs are more likely to be logged than request content