Zola 2026-08-12T00:00:00+00:00 https://blog.16px.eu/atom.xml 2026-08-12T00:00:00+00:00 2026-08-12T00:00:00+00:00 Unknown https://blog.16px.eu/posts/safety/ <p>Hey! It's been a bit, hasn't it? While we were taking a "break" from writing blog posts, we worked tirelessly to implement many features, but the most important ones are of course the ones targetting security.</p> <p>Running a file uploader service is a difficult endeavour for, in many peoples' opinions, little reward. I (fzorb) am not one of those people. I am very stubborn. As such, I have decided to go on an adventure of making this as "risk free" as possible while keeping the experience good.</p> <p>One of the risk-reduction measures in place is the whitelist of approved files for guests, which has mostly worked, however, for a while only the extension was checked, not the actual file contents. As such, anyone who wants to upload whatever could have just changed the extension in the file name.</p> <h2 id="a-first-attempt">A first attempt</h2> <p>One of the ways you can more accurately check for such files is by checking the file signature. We have used the <a rel="external" href="https://pypi.org/project/fleep/">fleep</a> library in order to achieve this. Unfortunately, this had a lot of innacuracies and we really did need a better solution for this.</p> <h2 id="enter-google-s-magika">Enter Google's Magika</h2> <p>Magika is an AI model which determines the file type based on the file's actual contents. It is incredibly lightweight and it is probably the best way to do this at the moment. At a first glance you might think ".. Google Magika uses complex, heavy AI systems instead of... you know... file extensions. .." <a rel="external" href="https://nitter.net/LundukeJournal/status/1989056823144452197">~ idiotic "journalist"</a>, but it makes sure that the files are actually what they claim to be.</p> <p>It has genuinely been working extremely well, except for some niche file formats (TempleOS-related) for which we have (temporarily) implemented whitelists.</p> <h2 id="but-this-doesn-t-eliminate-all-of-the-risk">But this doesn't eliminate all of the risk</h2> <p>People can still upload all kinds of illegal material which <strong>must</strong> be moderated, however, it certainly makes the service less and less appealing for circles which spread such appaling materials.</p> <p>We have a lot more ideas in the back of our heads we want to implement soon, such as file expiration dates and pasting, so stay tuned!</p> 2026-05-04T00:00:00+00:00 2026-05-04T00:00:00+00:00 Unknown https://blog.16px.eu/posts/welcome/ <p>Hello world! Welcome to the 16px.eu blog! From now on, here we will be making the latest announcements regarding our platform.</p> <p>This is part of the ample redesign we are undergoing. Because this is our first post, we've asked our staff members to introduce themselves:</p> <ul> <li><strong>fzorb</strong>: words words words im chief mouser</li> <li><strong>powerpc64</strong>: one two three four five six seven</li> <li><strong>tiramisou</strong>: i made the logo while eating chicken</li> <li><strong>charli</strong>: the horses compelled me to do it. they know all.</li> </ul> <p>We have a lot of things we cannot wait to tell you about, so stay tuned!</p>