zeitverschreib ⁂ hat dies geteilt.
zeitverschreib ⁂ hat dies geteilt.
Polizist: „Sie sind verhaftet, weil sie eine komplette Brockhaus Enzyklopädie geklaut haben!“
Ich: „Herr Wachtmeister, ich kann ihnen alles erklären!“
teilten dies erneut
Dickenhobelix, zeitverschreib ⁂, DeltaLima 🐧, Schokokäse, Linus ⓥ und ExtraFlauschig haben dies geteilt.
🐌 Klopf, klopf… darf ich kurz stören? 😄
Ja, richtig gelesen – auch bei Schnecken gilt: Erst anklopfen, dann hochheben!
Wenn ihr eine Schnecke mit Haus vorsichtig umsetzen wollt (z. B. von der Straße in den Garten 🌿), tippt sie ganz sanft am Häuschen an.
👉 Warum das wichtig ist?
Die Schnecke zieht sich dadurch in ihr Haus zurück – und ihr verhindert, dass ihr sie beim Anheben verletzt. Denn der weiche Körper kann sonst am Untergrund „festkleben“.
🐌💚
zeitverschreib ⁂ hat dies geteilt.
You're probably all familiar with those pages on the big social media platforms that run as “entertainment” and steal content wherever they can. The main thing is to…Nature Match Cuts (Steady)
Ich hab am Wochenende zufällig zwei Solar Panele mit je 140W bekommen die ich gern als Inselanlage im Garten betreiben würde. Bis auf die Panele hab ich nix.
Hat jemand ne gute Anlaufstelle für Zubehör und Ausstattung bzw ne Liste mit Dingen die zwingend brauche ?
zeitverschreib ⁂ hat dies geteilt.
Wenn sie nix zu essen haben, dann sollen sie doch nehmen:
"zentrale Produkte wie Diesel, Benzin und Flugbenzin"
🤣
*hier Guillotinenemoji*
zeitverschreib ⁂ hat dies geteilt.
Ne Guilliotine brauchts nicht.
Bei der Hausbar reicht ein Streichholz.
Gnmong ersma!
Categorical Imperative hat dies geteilt.
Wenn die Treibstoffversorgung deiner privaten Propellermaschine in Gefahr zu sein droht: nationalen Sicherheitsrat einberufen
Categorical Imperative hat dies geteilt.
zeitverschreib ⁂ hat dies geteilt.
It’s pretty weird that Hegseth thinks Jesus is going to be able to help Americans fight in Iran.
He’s just a doctor.
zeitverschreib ⁂ hat dies geteilt.
[Kreuzworträtsel]
"Was heißt zerbrechlich auf Französisch?"
"Fragile."
"Ich kenne gar keine Ile."
Andreas Kilgus mag das.
teilten dies erneut
zeitverschreib ⁂ und Frans Super 🇺🇦🇵🇸🍋 FKNZS🔻 haben dies geteilt.
“To say no to President Trump would be saying no to God.”
Paula White, Trump’s Spiritual Advisor
The lunatic are taking over!
teilten dies erneut
zeitverschreib ⁂ hat dies geteilt.
Advice sought. I've been reading #TerryPratchett #DiscWorld books in order starting with book one, The Color Of Magic. If you're a Discworld fan, you know The Color Of Magic is a "Wizards" book
Just finishing up book six, Wyrd Sisters. (A "Witches" book.)
Book seven, the next one, is considered a "Standalone", Pyramids. Are there shy characters in the previous books at all?
Book eight, "Guards! Guards!" Is a "City Watch" book. I understand there are characters in that book I've already encountered.
I'm tempted to jump there. Unless there are some character appearances or some other tie-ins, regardless of how trivial, in Pyramids further on.
Argh! (Help)
zeitverschreib ⁂ hat dies geteilt.
@NickEast_IndieWriter That quiz was fun. The first time it recommended a witches book. I was too tickled to remember which one, though.
The second time through it gave me The Color Of Magic. Which is the book I started with.
Thanks again for the link. It's a cute site.
@captainvellalives Nice! So, no shared characters (or appearances by the Luggage) in Pyramids? I'm liking the appearances of the characters across the books so far, so just making sure.
This is harder than it should be.
If you’ve decided to read them in order, I’d recommend sticking to that and not skipping ahead.
Not necessarily because of recurring characters cropping up (I can’t remember if any do in Pyramids) but because Pratchett gradually introduces you to different aspects of how the Discworld works - and the Discworld itself develops and changes - as the books go on
Trump versus Hormuz. Today's cartoon by Fahd Bahady. More cartoons: cartoonmovement.com/
teilten dies erneut
zeitverschreib ⁂ und fayuna 🌱 haben dies geteilt.
📣 FLOSS.social will be defederating with mastodon.cloud on 2026-05-01, joining with many other servers in taking this approach.
☹️ This server has been on a "limit" status for some time due to ongoing spam waves as well as lack of maintenance and moderation. After the 1st, all contact will be suspended.
☑️ FLOSS.social users should review their connections and make contact with them ASAP, and should encourage those contacts to relcoate to a maintained instance.
teilten dies erneut
zeitverschreib ⁂ und sonja dolinsek haben dies geteilt.
America's survival requires that Donald Trump go to prison.
#TrumpMustGo #TrumpKillsAmerica #Iran #RepublicansDidThis #NoMoreRepublicans #USPol
teilten dies erneut
zeitverschreib ⁂ hat dies geteilt.
Wenn man einen Sportlehrer paniert und scharf anbrät, erhält man einen Crosstrainer.
*verbeugt sich*
the kangaroo mag das.
teilten dies erneut
zeitverschreib ⁂, Schokokäse, Iris Volk, Murmel mit Energiekrise, the kangaroo, Schenkl | 🏳️🌈🦄 und Sofasophia haben dies geteilt.
It has been brought to my attention that I've used the vulgar and offensive term "motherfuckers" in two recent posts to describe various classes of people.
And that is, of course, because I'm a stickler for both clarity and precision when referring to techbros and transphobes.
Which means I should acknowledge that usage count is now three posts.
And to further clarify, while I'm sorry if someone told you there wouldn't be any math today, I am not sorry for anything else.
Thank you.
teilten dies erneut
zeitverschreib ⁂ und Cat 🐈🥗 (D.Burch) haben dies geteilt.
Lisa Melton hat dies geteilt.
Not a motherfucking chance.
Swearing is an increasing trend among men and women worldwide. Earlier studies on the positive aspects of profanity mostly relate to pain management and the release of negative emotions. The uniqueness of the current study is its analysis for a ...pmc.ncbi.nlm.nih.gov
Lisa Melton hat dies geteilt.
Swearing, or using taboo language with the potential to offend, has been shown to improve physical performance during short and intense tasks requiring stren...Nicholas B. Washmuth (Frontiers)
Motherfuckers is a perfectly respectable adjective if used appropriately.
Your use of the term is absolutely correct. Techbros and transphobes are, by definition, motherfuckers.
I yield back.
Lisa Melton hat dies geteilt.
I say "fuck" a lot. That rule is even in my profile.
So as far as I'm concerned, you're a member of the tribe.
Lisa Melton hat dies geteilt.
As a representative of the mother fucking community, I accept your use of the term in the derogatory.
Now please excuse me, these parasites need their father's assistance.
Lisa Melton hat dies geteilt.
You tell 'em.
I don't lose sleep over the offended sensitivities of people who are more disturbed by garden-variety obscenity than the very real, far more harmful obscenities being referred to.
Lisa Melton hat dies geteilt.
Lisa Melton hat dies geteilt.
Right on.
Those motherfucking cunts can fuck right off.
Interesting how I, a man, have used the term "motherfuckers" repeatedly on Fedi without receiving any censure. I wonder what the difference could possibly be.
[narrator: he did not actually wonder this at all.]
Lisa Melton hat dies geteilt.
teilten dies erneut
Jens Finkhäuser hat dies geteilt.
Lisa Melton hat dies geteilt.
Lisa Melton hat dies geteilt.
Lisa Melton hat dies geteilt.
Scold me for saying motherfucker too much?
I wish a motherfucker would.
Lisa Melton hat dies geteilt.
@Unlikelylass If you're super precise, that may not be true. One could be fucking non-mothers only up to the point of conception, and then stop and never again engage with that person.
I don't know how likely that is, to be fair.
@FinalGirl LMAO!! 🤣😂🤣
(As she quietly thinks, "Same. 💯")
Also: One of my favorite words in the English language. It conveys so much meaning and emotional resonance, and is so variable.
I use "fuck" a lot for the same reason. One of the most variable words in the English language.
And I think people who are hung up on swearing need to get over their shit because they're just fucking wrong.
Lisa Melton hat dies geteilt.
Somewhere I have an image that seems a bit relevant, but I can't find it, so will just provide the alt text.
A picture of a young person sitting hunched against a wall, face in hands, in the shadows of a dumpster thrown by the harsh light of a street lamp. Above the picture are the words "Some people are more offended by me saying fuck than they are about me being hungry."
Below the picture are the words "Fuck, I'm hungry."
Lisa Melton hat dies geteilt.
While 'motherfuckers' slips most easily off the tongue, I prefer the more accurate 'cousinfuckers'.
And yes, I'm a southerner, and both of my parents were from Alabama, but my mother and father were in no way related. No one in either of their family trees was, to my knowledge, married to a cousin.
Rednecks, yes.
Po' white trash, yes.
But not cousinfuckers.
Lisa Melton hat dies geteilt.
Lisa Melton hat dies geteilt.
Lisa Melton hat dies geteilt.
I'm reminded of a friend of mine in High School who got into an argument with his mom.
She repeatedly kept calling him a "son of a bitch", to which he could only laugh & agree. 😆
Lisa Melton hat dies geteilt.
"polite society" is a group of people who will let a vile (techbro, transmisic, etc) lie pass without objection, as long as the lie is said serenely
then "polite society" will clutch their pearls in shock and horror when someone, who was listening to what the serene silver tongued snake said, says the word "motherfucker" in their rightful rejection of said lie
there is a divide here that doesn't get much press, but be aware of it
and don't be on the side of "polite society"
@benroyce I was told off once for calling right-wing extremists pigs, along the lines of "Do you think callling people pigs will change their minds?" - I had to explain (with some exasperation, I might add) that if someone earns the "pig" label they're beyond changing & I'm not addressing them at all; I'm letting everyone else know that if the thought "Those people are pigs" occurs to them, they're neither wrong nor alone.
Also, this Patton Oswalt bit: youtube.com/watch?v=AkKo1_RP_0…
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.Skeezy Vampire (YouTube)
@jwcph @benroyce
To inject a little caution: I’m all for calling a supremacist a supremacist, an asshole an asshole, a motherfucker a motherfucker… based on what they say, believe, and do.
But crossing the line that dehumanizes them is oh so easy & feels so good. But if we do that we’re the same as them, just in a different ‘tribe’; and then it’s easy then to forget that evil in this world is done by ordinary people just like you and I.
@DavidM_yeg No, we are not. Kindy piss off and stay out of my mentions.
@DavidM_yeg Thank you! Apology accepted.
@DavidM_yeg @jwcph
i'd like to present an idea to you:
that by fighting, you can make mistakes, yes
but not fighting is worse
that some of the reason the usa is where it is at is because of this "high road" approach to not engage, and the bigots just take the whole game
in other words, i acknowledge the peril of what you say
but i'm saying the peril of what you say is a smaller peril than not calling a motherfucker a motherfucker
you need to fight in this world
you have to
Lisa Melton hat dies geteilt.
Instant follow.
(Which, apparently, is extremely belatedly, and for that I *do* apologise.)
The versatility of quintessentially Anglophone “motherfucker” has a corollary in (especially Mexican) Spanish, “pinche”:
Idk how any of you were raised, but I knew in kindergarten that some words were gutter talk. My worst derrogative was "stupid pooper butt," and Sherry was definitely one.
My first exposure to the word "fucker" was the summer between kindergarten and first grade. Two men were doing some kind of maintenance on the storm drain in front of the house that was kitty-corner from my house. I went to watch, even though I wasn't supposed to cross the street that was a highway.
I legit thought they meant to say "sucker" because they were talking about some other man who they didn't like, and who wasn't there.
So when I added the various forms of "fuck" to my vocabulary (at summer camp) I *absolutely* knew why that was gutter talk.
Vulgar? Sure. Offensive? Nah
You did nothing wrong.
Those mofos should’ve tried harder not being mofos
Lisa Melton hat dies geteilt.
@WarnerCrocker that word appears in many forms in the linked song. they forgot about Dre.
youtube.com/watch?v=QFcv5Ma8u8…
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.DrDreVEVO (YouTube)
I'm not offended by this but I am offended by your use of math in the singular and instead of arithmetic when what you are doing is counting.
British Mathematicians do maths and we're furious !!!
(I haven't had any coffee yet)
teilten dies erneut
zeitverschreib ⁂, lj·rk, Dgar und Lisa Melton haben dies geteilt.
Yup...
Take another Whiskey on the rocks!
My favorite Szene from the Bible
m.youtube.com/watch?v=9TdLrloG…
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.MovieScenesInHQ (YouTube)
Ah yes, my favorite verse:
Jackson 19:94 - "ENGLISH MOTHERFUCKER, DO YOU SPEAK IT?!"
teilten dies erneut
zeitverschreib ⁂ hat dies geteilt.
Sensitiver Inhalt
zeitverschreib ⁂ hat dies geteilt.
Habe gerade 128GB DDR4 Ram gefunden (4x 32GB). Hat jemand Bedarf?
Vorsichtshalber: First come, first serve.
✏️ EDIT: 4/4 weg. Danke fürs Teilen
zeitverschreib ⁂ hat dies geteilt.
teilten dies erneut
Amalia Zeichnerin, zeitverschreib ⁂, moanos und Lena Richter haben dies geteilt.
Stell dir vor, du zankst die ganze Woche mit dem Papst, und deine Speichellecker behaupten, der Papst kenne die Bibel nicht, nur damit einer deiner Speichellecker auf grosser Bühne einen erfundenen Bibelvers aus Pulp Fiction zitiert.
Ich denk mir den Scheiss wirklich nicht aus…
teilten dies erneut
zeitverschreib ⁂ und Sasha haben dies geteilt.

Sasha mag das.
Mein Sohn hat ein #Kickstarter Projekt, das bald losgeht. Es handelt sich um eine #Zeitraffer-Kamera für #Pflanzenaufnahme. Freue mich über #Unterstützung!
kickstarter.com/projects/plant…
🌿🌱🪻🪴
#plantcam #kickstarter #gardeningtech #plantphotography #timelapse #pflanzen #
teilten dies erneut
zeitverschreib ⁂ hat dies geteilt.
#explainer #anti #fateilten dies erneut
zeitverschreib ⁂, 🏳️🌈 El Murciélago 🦇 FCK|NZS und fayuna 🌱 haben dies geteilt.
Ich sehe gerade im #wdr die #menschenhautnah Folge "Vom Glück, ein Huhn zu retten" und bin wieder einmal geschockt von den Bildern die ich so oder ähnlich, schon oft gesehen habe.
Es ist unfassbar, wie Menschen mit anderen Lebewesen umgehen können.
Ich empfehle jeden Menschen, der noch Eier isst, diese Sendung zu gucken. Die wirklich fiesen Sachen werden nicht einmal gezeigt, da die Geretteten Hühner immerhin aus #bodenhaltung kommen.
ardmediathek.de/video/menschen…
#tierschutz #tierleid #govegan
Hannes kleiner Bauernhof ist ein Hühnerparadies, in dem die Tiere ein glückliches Leben führen. Doch nicht alle ihre Hühner hatten von Anfang an ein schönes Leben. Einige waren Legehennen aus der Massentierhaltung.www.ardmediathek.de
teilten dies erneut
zeitverschreib ⁂ hat dies geteilt.
• CDU beschließt Austritt aus Atomkraft ➡️ CDU will Wiedereintritt in Atomkraft
• CDU kritisiert Tankrabatt der Ampel ➡️ CDU beschließt Tankrabatt
• CDU bemängelt fehlenden Integrationswillen der Migranten ➡️ CDU streicht Integrationskurse für Migranten
CDU ➡️ ShitShow… 🔁
via Laserbrille
Genista mag das.
teilten dies erneut
Jörg 🇩🇪🇬🇧🇪🇺, zeitverschreib ⁂ und Gienion haben dies geteilt.
Another request for the wider fediverse. I'm trying to hunt down the name of an old website I used to go to that was basically a bunch of chiptunes that could fit on a floppy disk. I think it had weekly and monthly popularity charts.
It was for original music, might have had floppy or 8bit in the name, but I think I remember it having a ridiculously yellow background.
Does anyone remember its name or even if it exists. I think I might have hallucinated it...
EDIT: I FOUND IT - floppyswop.co.uk/
EDIT 2: 2nd site found - micromusic.net
Bonus: songfight.org
Thank you everyone who suggested sites though - I have lots of things to search through
FLOPPYSWOP.CO.UK A resource for any files that fit on a floppy disc; art, media, sound, noise, from all over the world, all available for taking and swopping, please send us your files and share ours.floppyswop.co.uk
teilten dies erneut
zeitverschreib ⁂ und Duke haben dies geteilt.
heute konnte ich mein wohl detailreichstes bild einer spinne ever machen, die gute lief einfach nicht weg :3
danke dafür, liebe
Feld-Reifenspinne
Trochosa ruricola
mglw aber auch
Erdwolfspinne
Trochosa terricola
de.wikipedia.org/wiki/Erdwolfs…
#spinne #spider #krabbeltierchen #AuwaldRunde #BugOfTheDay #nature #biodiversity #arachnology #macro
teilten dies erneut
zeitverschreib ⁂ hat dies geteilt.
Hallo Fedis,
mir ist gestern Nacht im Bahnhof Hannover meine Querflöte gestohlen worden.
Ich poste mal die genauen Daten in der Hoffnung, sie vielleicht noch wieder zu bekommen:
Trevor James Virtuoso RBE,
Silberrohr aus massivem 925er Sterlingsilber,
Mechanik Neusilber versilbert, Offset-G,
E-Mechanik, Ringklappen, Spitzdeckel, H-Fuß, Serien# 202873
gerne boosten
teilten dies erneut
zeitverschreib ⁂, crossgolf_rebel - kostenlose Kwalitätsposts, Unity :Friendica: ⁂, Wombat, Kinky_me 🏳️🌈🏳️⚧️, Frans Super 🇺🇦🇵🇸🍋 FKNZS🔻, caos, Vroni24, stephie, Quincy ⁂, Hannah Steenbock, zucker & 🐢, Lena Richter, Anny Hartmann, Mer-fOKxTOwl, Distravinyl 2.0👑, DrRetro, Tyrone Slothrop, Momentum, Nike Leonhard, Genista, Kiki, teefax, 🎮 Nerdherz 🧶, Hallo?!? und Jörg 🇩🇪🇬🇧🇪🇺 haben dies geteilt.
der Bahnhof ist doch total kameraüberwacht, da sollte das "nicht ermittelbare" Täty ja sicher gefilmt worden sein. Was bei der Wiederbeschaffung vermutlich nur wenig hilft....Viel Glück!
Wärest du allerdings Polizeiquerflötist, würden sie sämtliche Mobiltelefone in der Bahnhofswabe ermitteln und die Besitzys hops nehmen...😡
teilten dies erneut
zeitverschreib ⁂ hat dies geteilt.
I was bored, so I did this. Do with it what you want :D
🎨 revenge.day/art/burn-down-ai-d… (High Res)
teilten dies erneut
zeitverschreib ⁂ hat dies geteilt.
teilten dies erneut
zeitverschreib ⁂ hat dies geteilt.
teilten dies erneut
zeitverschreib ⁂ und Lisa Melton haben dies geteilt.
Sensitiver Inhalt
zeitverschreib ⁂ hat dies geteilt.
teilten dies erneut
Kinky_me 🏳️🌈🏳️⚧️, zeitverschreib ⁂ und @Blumi147 haben dies geteilt.
Sensitiver Inhalt
zeitverschreib ⁂ hat dies geteilt.
Sensitiver Inhalt
EU-App zur Altersüberprüfung.
Anonym.
Nicht verfolgbar.
Auf allen Geräten nutzbar.
Na, das kann doch eigentlich nur lustig werden. facepalm
tagesschau.de/ausland/europa/e…
Ich glaub, ich werde meine #pixelfed Instanz einstampfen.
Hetzner ging mit den Prisrn rauf, und ich warte seit mittlerweile Jahren auf ein angeblich neues WebUI, das angeblich wesentliche Bugs beheben soll...
Ich mag nimmer warten.
Und ich glaub ich werd mich überhaupt mehr aus der Onlinewelt zurückziehen und mehr ins Reallive meine Aktivitäten verlagern.
Mein #Friendica behalte ich natürlich, und #Peertube ebenso.
Mal schauen,wie ich wirklich weitertu.
#digitaldetox
teilten dies erneut
zeitverschreib ⁂ und Cyb3rrunn3r haben dies geteilt.
jakob 🇦🇹 ✅ mag das.
@Herr Jemineh 🌻 @ActivityPub for WordPress
Ich tät ja pixelfed mögen...
Dort habe ich meine Auswahl an "schönen Bildern"...
Aber die Entwicklung schläft so derartig... und wirklich funktionseinschränkende Bugs werden seit JAHREN nicht behoben... es lebt von Ankündigungen des neuen WebUI... das ebenfalls seit mindestens 3 Jahren als "demnächst" angekündigt wird... aber nicht kommt.
Friendica passt gut für mich. Ich kann kurze, oder auch SEHR lange Beiträge posten... ich kann Bilder posten und die Bilder auch in den Fließtext einbinden und nicht nur als Attachment anhängen und hab einen schönen Thread bei den Kommentaren. Und ich kann deutlich mehr als 4 Bilder posten und auch sehen. (Alles was dein Mastodon z.B. nicht kann 😊 weswegen du wohl auch Wordpress benötigst)
Ich habe Friendica auch in Erwägung gezogen. Aber da ich manche Inhalte auch außerhalb vom Fediverse nutzen und anbieten will, fand ich mein jetziges Setup am passendsten.
Eigentlich aber cool, dass es so verschiedene Optionen gibt, die sich dann alle "hier" wieder treffen.
Und für Diskussionen und den normalen SociaMedia-Alltag ist auch gut, jemanden in der Verwandtschaft zu haben, der eine eigene Mastodon-Instanz hat. 😎
jakob 🇦🇹 ✅ mag das.
Hi there,
recently there has been a post here about Colota and thought you might be interested in a short summary about Colota.
I am tracking my position since several years now mainly with Owntracks (and now Colota) and a simple postgres DB/table.
I am a fan of the indieweb and eat what you cook and with already some million location points collected I recognized some pattern in existing GPS trackers I wasn't happy about:
So I decided to build my own GPS tracker and called it Custom Location Tracker.
Improved battery consumption should come from disabling GPS entirely in so called "geofences" which are basically circles you draw on a map in the app. With GPS disabled in these you also won't get duplicate points while staying at e.g. home or work.
The app is still quite new (actively developed since early 2026) but has already quite a lot of features which basically all came from user feedback. E.g.:
- Automatic Tracking profiles which apply different tracking settings while e.g. being connected to Android Auto, moving slower than 6km/h or while the phone is currently charging.
- The app works fully offline (map will not be visible then) but you can predownload map tiles from a tile server I selfhost or use your own tile server.
- You can define how locations are synced to your backend. E.g. only for a specific Wi-Fi SSID every 15min, once a day or with every location update.
Overall the app's focus should move to be a mobile location history app. So basically Google Timeline in a mobile app which also supports selfhosted backends (as backup).
The app is fully open-source AGPL-3.0, has no ads, analytics or telemetry and only sends data to your own server (if you want to).
You can download two versions.
1. Google Play store which uses Fused Location Provider and therefore uses Google APIs. Also works with the sandboxed version by GrapheneOS and microG.
2. FOSS version which uses Android's native GPS provider with a network location fallback. Available on IzzyOnDroid and hopefully someday on F-droid.
Both can be also downloaded directly from the repo.
How I track my location continuously with Colota, my self-developed Android app, store it in PostgreSQL with PostGIS, serve vector tiles via Martin and render an interactive map with MapLibre GL JS.Max Dietrich (Max Dietrich - Technical Product Owner GIS)
Does anyone use Colota?
This is an app to save location history locally. I'd like to connect it with HomeAssistant, which it supports, but the documentation is pretty sparse. Do I need ro set up HA to receive the info? What endpoint do I enter into the Colota app?I feel like this should be more obvious, I really have no idea
mögen das
Auster und mrmaplebar mögen das.
teilten dies erneut
zeitverschreib ⁂ hat dies geteilt.
I also agree with you both that location data is definitely personal data that should be protected. However, Colota stores data only on your own device and it's never sent anywhere unless you configure a server and that server is out of Colota's reach. End-To-End-Encryption doesn't apply here since Colota is just one endpoint sending to the user's own server. There's no third party to encrypt against.
Colota is also meant to be an app which supports several "Google Timeline" alternatives like Dawarich, Reitti, Geopulse, etc. All these backends would have to support the same decryption which Colota offers, which is not realistic. You can also specify that data is only sent via an active VPN connection or just use it offline and use the built in file export as e.g. geojson.
Also Colota is a free and open source project. You can review the full source code to verify how your data is handled.
If the target server is compromised or taken by LEA the data is gone.
Laying the responsibility into the hands of the user is not ok for such an data aggregating service. Such highly critical, private and intime data should be protected and secure by default.
Not even transport encryption is enforced in the project. At first glance, http is allowed on local connections?!? Generate a self signed SSL cert on start and pin it in the app. Easy.
It is no excuse that other services do not follow these state of the art protection measures.
If the target server is compromised or taken by LEA the data is gone.
That's true for any client that sends data to a server including your browser, email client or any other app. Colota doesn't operate a server. If you're concerned about server compromise, that's a server-side hardening question (disk encryption, access controls, etc.) that's outside the scope of a client app.
Laying the responsibility into the hands of the user is not ok for such an data aggregating service. Such highly critical, private and intime data should be protected and secure by default.
Colota is not a data aggregating service. It's a local-first app. By default, no data leaves your device. You choose if and where to send it. That's the opposite of aggregation. It's the user being in full control, which is exactly what self-hosted software is for.
Not even transport encryption is enforced in the project. At first glance, http is allowed on local connections?!? Generate a self signed SSL cert on start and pin it in the app. Easy.
It is. HTTPS is enforced for all public endpoints. HTTP is only allowed for private/RFC1918 addresses. Forcing TLS on 192.168.x.x would require every self-hoster to set up certificates for their LAN, which is a real barrier for the target audience. Colota already supports self-signed certificates if you install the CA on your device.
It is no excuse that other services do not follow these state of the art protection measures.
I didn't say that as an excuse. I explained why a client app that supports multiple independent backends can't enforce payload encryption. Each backend would need to implement the same decryption. That's a technical reality, not a lack of care about security.
Also again, a server is optional. It works offline and you can just export files with the data from the app.
It is no excuse that other services do not follow these state of the art protection measures.
Most projects in the self-hosted space put the load of transport security on the user or another system, including big ones like Immich.
Not sure why you've chosen to be indignant about this particular implementation.
Not sure why you've chosen to be indignant about this particular implementation.
We are talking about a tracking App. Most selfhosted projects do not store such private data. You may can mage the argument for immich but only for ppl who take a picture every 5 min.
Most selfhosted projects do not store such private data.
That is patently not true, in the self-hosted space or otherwise.
If you want to take some kind of the security stance on pii or other personal data, you may want to take a look at the app's workflow first before making declarations of "inadequate security". There are other considerations than simply slapping a self-signed cert on data in transit (or at rest, for that matter). URL encoding, secrets management, api structure, etc.
If you want to architect the security of your data using this app, it is much easier to simply encapsulate or encrypt the transport yourself. A VPN would be fine. An authentication proxy would be another.
Ultimately, your comments on security here need more and better context to meet a reasonable threshold of confronting the dev on it.
In security and development there is a statement, called "secure by default". That means the default settings are secure. This would encapsulate something like enforced Transport encryption.
Does this mean that the config can not be changed to fit the thread model? No.
Thats like saying:
"The SSH Server configuration does not need to be secure because the SSH Server is turned off by default"
That's an interesting reading of what I said, but not what I said. I didn't write that security doesn't matter because the server is off. I wrote that when nothing leaves the device by default, there is no attack surface to secure. That is the definition of secure by default.
Secure by default means the default configuration is safe. By default, Colota stores location data locally and exposes none of it. If you believe that somehow fails the secure-by-default standard, I'd genuinely like to understand how.
If your actual concern is what happens once a user configures a server, that's a fair discussion but it's a different one. I already addressed that above and I'd be curious to hear a specific objection to that setup rather than a general claim that it's insecure. Server compromise risk is inherent to every self-hosted service. That's not a Colota flaw, that's the model. And "users shouldn't have to manage their own infrastructure" is a philosophical position, not a vulnerability. One that doesn't really fit a tool explicitly built for people who want exactly that control.
By default this applications allows when adding a server, that the communication is not encrypted between the app and the server. This should be configured by default to enforce TLS encryption. If someone would want to disable dis behavior and allow unencrypted communication, then this should take extra steps.
As i commented somewhere else, to say that since it is turned off it is secure by default, is like saying:
"The SSH server is turned off by default so the configuration that comes with it does not need to be secure when shipped"
By default this applications allows when adding a server, that the communication is not encrypted between the app and the server. This should be configured by default to enforce TLS encryption.
That's not true. For public endpoints, HTTPS is enforced. You can't use HTTP. For private IPs, yes HTTP is allowed. So "by default... not encrypted" is not correct and misleading.
This would encapsulate something like enforced Transport encryption.
Yes, this is what we're discussing... Are you a bot? Or are you really not following the conversation?
Yes, this is what we're discussing... Are you a bot?
Obviously no. But you keep dodging the point here. And instead of comming up with an argument against my point, you seem to try to attack me personally.
There's no third party to encrypt against.
Encryption does not exist for third parties. It exists to protect sensitive data from malicious or state actors who might hack your server and steal the information for various purposes. Here in the US law enforcement is free to hack and steal and demand whatever they want.
All these backends would have to support the same decryption which Colota offers, which is not realistic.
I would prefer single-party encryption vs. integration, personally. Could make it optional.
I appreciate your contributions but for me personally this is a dealbreaker.
Encryption does not exist for third parties.
E2E encryption is specifically designed for the third-party problem. Encrypting so a middleman can't read your data.
It exists to protect sensitive data from malicious or state actors who might hack your server and steal the information for various purposes
If a server gets hacked where a user sent data from Colota there is nothing the app can do about it or to prevent it. Also you can create a backend which encrypts the data. Again: Colota does not offer a backend.
Here in the US law enforcement is free to hack and steal and demand whatever they want
I don't think it's the job of an Android app to protect a server from government hacking attacks.
I would prefer single-party encryption vs. integration, personally. Could make it optional.
I understand the concern. The tradeoff is that backends like Dawarich or GeoPulse need to read the coordinates to build timelines, detect trips, display maps, etc. Encrypted blobs would make the server a simple backup at which point the local auto-export to Syncthing/Nextcloud achieves the same thing without the complexity. For pure backup, the offline + file export workflow already covers that use case. Also the app is offline-first. There is no server needed unless the user specifically configures that.
I appreciate your contributions but for me personally this is a dealbreaker.
Fair enough, thanks for the feedback.
If a server gets hacked where a user sent data from Colota there is nothing the app can do about it or to prevent it
It can't prevent the hack, it absolutely can protect the data, and make it useless. That's the entire purpose of encryption.
I don't think it's the job of an Android app to protect a server from government hacking attacks.
Again, it's not supposed to.
Also the app is offline-first. There is no server needed unless the user specifically configures that.
The server is needed for the same reason a server is needed for anything: to back up the data.
If you don't want to implement it, that's fine, I respect your decision, but there's no reason to come here pretending not to understand its purpose.
It's not that I don't want. I can't implement it because I don't offer a server. You would have to address this to the backend developers (Dawarich, GeoPulse or even yourself) who actually store the data.
but there’s no reason to come here pretending not to understand its purpose.
I am understanding your point, but apparently you are not understanding mine which is the actual use case of the app and it's workflows and therefore make it look like it would miss basic security patterns. The whole "location history" ecosystem stores plaintext coordinates.
It's not that I don't want. I can't implement it because I don't offer a server.
You don't have to. You just have the app encrypt the data before it's backed up and exported.
you are not understanding mine which is the actual use case of the app
I understand the usecase but you're acting like you don't understand the purpose of encryption, for some reason suggesting that it's supposed to prevent hacking, when that is not at all what it does.
You don’t have to. You just have the app encrypt the data before it’s backed up and exported.
I already explained several times why that's not realistic for the selfhosted backends.
You could have just written at the beginning that you think it would be a good idea to implement (optional) encrypted backups Independent of the selfhosted backends. Then I would have answered, great idea!
But you continued to reply on a thread about end to end encryption where I specifically mentioned the selfhosted backends.
I understand the usecase but you’re acting like you don’t understand the purpose of encryption,
Have a good day!
I already explained several times why that's not realistic
You haven't. You've only explained why you don't want to do it, which is fair, but you keep presenting as if it's not possible, which is not accurate. Lots of apps can and do create encrypted backups.
New day, new answer!
You started this conversation in a thread about E2E encryption and I responded in that context. Halfway through you shifted to encrypted local backups which you first called 'single-party encryption' and that's a completely different thing. If that had been your original point we could have skipped this entire exchange. It's a good idea which I already mentioned in the answer you replied to but you seem to have missed.
To clarify two things: I never said it was impossible. I said it wasn't realistic in the context of the selfhosted backends we were discussing. Those are different statements. And yes, lots of apps do encrypted backups because they are backup apps. Colota isn't. The existing export is for tools like QGIS or selfhosted backends and encrypting that data would break that use case entirely.
Encrypted import/export for backup is a separate feature that doesn't exist yet, so there's nothing here that's badly implemented. It simply isn't implemented at all.
Halfway through you shifted to encrypted local backups
I never shifted anything. I was talking about encrypted backups on a server. These can be encrypted locally before being synced to a server.
you first called 'single-party encryption'
Nope, you literally just made that up. I didn't say that and I don't even know what that means.
I said it wasn't realistic in the context of the selfhosted backends we were discussing.
...but it is.
And yes, lots of apps do encrypted backups because they are backup apps. Colota isn't.
My suggestion was that it could be...
The existing export is for tools like QGIS or selfhosted backends and encrypting that data would break that use case entirely.
You already have local backups that could be encrypted and then synced to a general storage server.
Encrypted import/export for backup is a separate feature that doesn't exist yet, so there's nothing here that's badly implemented.
I said literally nothing about your implementation. You're imagining things. Please read more attentively.
I never shifted anything. I was talking about encrypted backups on a server. These can be encrypted locally before being synced to a server.
You entered a thread explicitly about E2E encryption started by ShortN0te and introduced "single-party encryption" or which later turned out to mean encrypted backups.
Nope, you literally just made that up. I didn’t say that and I don’t even know what that means.
"I would prefer single-party encryption vs. integration, personally. Could make it optional."
You wrote 'I would prefer single-party encryption vs. integration, personally' in this exact thread. That's not something I made up.
…but it is.
I'd genuinely like to understand how.
My suggestion was that it could be…
This app has a specific purpose. It could have a encrypted backup feature but it won't change it's fundamental purpose which is viewing the location history.
You already have local backups that could be encrypted and then synced to a general storage server.
The exported files are not designed as backups (even though they are being used as ones by existing users). They're meant to be workable in other tools like QGIS, Strava or Komoot. Encrypting them would break that entirely.
I said literally nothing about your implementation. You’re imagining things. Please read more attentively
Fair point. I misinterpreted that. No need to get personal.
You entered a thread explicitly about E2E encryption started by ShortN0te and introduced "single-party encryption"
That person replied to a thread I started, not the other way around. I literally never said those words. If you're going to try and gaslight me in order to win an internet non-argument, then I'm not going to continue to engage with you. Goodbye.
You entered a thread explicitly about E2E encryption started by ShortN0te
That person replied to a thread I started, not the other way around. It was never about E2E. It was always about encrypted backups.
It could have a encrypted backup feature but it won't change it's fundamental purpose
It's not supposed to. It shouldn't.
They're meant to be workable in other tools like QGIS, Strava or Komoot. Encrypting them would break that entirely.
Then make it optional? Or don't, I don't care.
No one is talking about a phone or a PC, we're talking about a server.
Also phones and PCs are only encrypted at rest.
Who is "we"? I'm responding to your top level comment. You just asked the creator of an exclusively client-side app whether they support encryption. Not only is it reasonable for me to assume you mean client side encryption, it's unreasonable for you to ask for server side encryption, because there is no server. It's a BYOBackend situation.
Now if you're asking for client-side encryption, something like Keepass where the file itself is encrypted, you have to use some form of auth to decrypt it on use, and you can store this file using whatever backend you want, that's perfectly reasonable. I would still consider that encrypted at rest, but at least you could maybe separate encrypted reads from writes and limit the attack surface in the event of a breach.
You just asked the creator of an exclusively client-side app whether they support encryption.
Client-side encryption is not a novel concept.
something like Keepass where the file itself is encrypted, you have to use some form of auth to decrypt it on use
That's significantly more complicated and time-consuming.
I don't know what you want man
I honestly don't know how to be more clear about this. It's not complicated. I want client-side encryption, man.
i didn't realize this was one of those "digging my heels in because I don't know how to be wrong" threads
LOL I didn't know that either, but here you are!
I've been using this for a few weeks and it's great. In addition to offline-first, it would be nice to be able to ask Colota:
List my trips between date1 and date2 when I was near (ie within x meters from) point y.
I am planning to use this for a long time too, so an export/import data for when I change my phone would be nice. I see Export but not Import.
Also, being able to delete trips between date1 and date2 would be useful. Currently, you can delete 1-by-1 or recent trips only.
Glad it's working well for you!
Why a dedicated backup server instead of just backing up to a local file that can then be backed up to a service of choice?
Also for profiles, it would make more sense to use Bluetooth to detect a vehicle or WiFi to detect when you're home vs. Geofencing or Android Auto or speed. How can it tell when you leave the geofence if the GPS is off?
Probably phrased that wrong. There is no backup server. Users can create and add one if they like.
Colota offers out of the box file export (csv,geojson, gpx and kml) and supports hive_partitioning via variables in the endpoint (colota.app/docs/configuration/…).
Colota already uses WiFi for home detection (WiFi pause in geofence zones) and Android Auto/car mode for vehicle profiles.
How can it tell when you leave the geofence if the GPS is off?
GPS is only turned off by being connected to a WiFi or being motionless (or both) while being in a geozone. When wifi disconnects or/and motion is recognized the GPS starts again.
Bluetooth detection is the one thing that doesn't exist. It could be a useful addition. I will note that. Thank you for the feedback!
Examples Read data from a Hive partitioned dataset: SELECT * FROM read_parquet('orders/*/*/*.parquet', hive_partitioning = true); Write a table to a Hive partitioned dataset: COPY orders TO 'orders' (FORMAT parquet, PARTITION_BY (year, month)); Note …GitHub User (DuckDB)
There is no backup server. Users can create and add one if they like.
No I understood the server is self-hosted...?
Colota offers out of the box file export
I see that but this should be an automatic backup process. Plus there's no way I can see to IMPORT that data somewhere else.
When I use an app like Fitotrack, it automatically makes a backup file periodically and then is automatically backed up to my server with Nextcloud or Syncthing. I don't need a dedicated server for it.
Colota already uses WiFi for home detection (WiFi pause in geofence zones)
How can it do that when it didn't ask me for an SSID? And what's the point of the geofence if it doesn't even use it anyway? I am cornfuse.
When wifi disconnects or/and motion is recognized the GPS starts again.
How is motion recognized without GPS?
No I understood the server is self-hosted…?
Colota is client-only. There is no Colota server software. When you add a server endpoint in the settings, you're pointing it at your own existing server (Dawarich, Home Assistant, Traccar or any HTTP endpoint). Colota doesn't provide or require any server component. It just sends data where you tell it to.
I see that but this should be an automatic backup process. Plus there’s no way I can see to IMPORT that data somewhere else.
When I use an app like Fitotrack, it automatically makes a backup file periodically and then is automatically backed up to my server with Nextcloud or Syncthing. I don’t need a dedicated server for it.
Colota actually has automatic file export (Settings > Export Data > Auto-Export) that periodically exports to a directory on your device. From there Syncthing/Nextcloud can pick it up. Import is not yet available but is planned. There is no dedicated server needed and also not offered to setup. However you can create a webhook on your own server for the app if you want to. See e.g. colota.app/docs/integrations/c…
How can it do that when it didn’t ask me for an SSID? And what’s the point of the geofence if it doesn’t even use it anyway? I am cornfuse.
WiFi pause doesn't use a specific SSID. It detects any unmetered network (WiFi/Ethernet) while you're inside a geofence zone. The geofence defines where the pause should happen, the WiFi connection confirms you're settled there and is used to detect when you leave it. Without the geofence, any WiFi connection would pause tracking everywhere.
How is motion recognized without GPS?
Motion detection uses the device's hardware motion sensor (if available). It's a low-power sensor that fires when physical movement is detected.
Colota works with any backend that accepts HTTP requests (POST with JSON body or GET with query parameters).colota.app
When you add a server endpoint in the settings, you're pointing it at your own existing server (Dawarich, Home Assistant, Traccar or any HTTP endpoint).
Ok please forgive me, I'm unfamiliar with this terminology.
Colota actually has automatic file export (Settings > Export Data > Auto-Export)
Oh, sick, I missed that somehow, thanks.
Sorry for the confusion on my part.
I still don't see a way to import data? Doesn't do any good to back it up if I can't import it back in?
No worries.
I still don’t see a way to import data? Doesn’t do any good to back it up if I can’t import it back in?
Totally true. A import feature will be added with one of the upcoming releases.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:
| Fewer Letters | More Letters |
|---|---|
| CA | (SSL) Certificate Authority |
| HA | Home Assistant automation software |
| ~ | High Availability |
| HTTP | Hypertext Transfer Protocol, the Web |
| HTTPS | HTTP over SSL |
| IP | Internet Protocol |
| SSH | Secure Shell for remote terminal access |
| SSL | Secure Sockets Layer, for transparent encryption |
| TLS | Transport Layer Security, supersedes SSL |
| VPN | Virtual Private Network |
| VPS | Virtual Private Server (opposed to shared hosting) |
10 acronyms in this thread; the most compressed thread commented on today has 7 acronyms.
[Thread #235 for this comm, first seen 12th Apr 2026, 12:40]
[FAQ] [Full list] [Contact] [Source code]
Decronym: A simple Reddit bot. GitHub Gist: instantly share code, notes, and snippets.Gist
In addition to wifi, Bluetooth beacons would be good too.
Seeing the same SSIDs (eg in a cinema) might also mean you are not moving, but then how can you tell you are not sitting near another train passenger with their hotspot on?
you can predownload map tiles from a tile server I selfhost or use your own tile server.
Could OSM tiles be used? Ie direct the app to an OSM server and download their data?
I've no idea how tiles work, so this may be an absurd question 🙂
I'm currently using GPSLogger, but Home Assistant's integration for it can't handle >1 device... if I install your app on multiple devices, can Home Assistant distinguish between them? Ie does the data nclude a DeviceID of some kind?
Edit: ok, I think I've found the answer in your Home Assistant documentation
Not an absurd question at all. The app uses vector data for the map. Public OpenStreetMap server's only offer raster data which is not compatible and would need way more storage to cover the same area downloaded. Also downloading tiles from openstreetmap servers would violate their tile usage policy.
However there are alternatives e.g. openfreemap.org/. I actually had OpenFreemap used before for the app but it uses Cloudflare as CDN which doesn't align with the privacy policy I want to offer for the app which is the reason I setup a own server (vps) which just directly serves the tiles (colota.app/docs/guides/tile-se…). Also if I would use a external tile server which may go offline for whatever reason there would be nothing I could do about it.
Basically you could use any tile sever which provides mbtiles but I don't know any other free options.
if I install your app on multiple devices, can Home Assistant distinguish between them? Ie does the data nclude a DeviceID of some kind?
Yes it either works with the Colota integration which needs a custom payload attribute to distinguish different devices (e.g. "tid": "colota") or you could use also the Owntracks integration (see colota.app/docs/integrations/h…). The API format sent from colota is completly editable.
OpenFreeMap – Open-Source Map Hosting lets you display custom maps on your website and apps for free.openfreemap.org
Thanks for the background on the tiles.
Yeah, from my PoV, I'd like to use the OSM data that's already on my phone (from other OSM based apps), but I understand your point.
So, where's your VPS? In EU?
FYI: Got the app installed, followed the instructions (which refers to a Home Assistant template that doesn't exist on the app?), modified the default custom template with tid set to an identifier and ... I appear to be at home 🙂
Thank you
So, where’s your VPS? In EU?
It's a VPS hosted by netcup in germany (maps.mxd.codes/)
Which refers to a Home Assistant template that doesn’t exist on the app?
Yes, you are right. I have to update the docs there. I removed the HA template because it basically just added the tid which I think is quite easy to add manually.
I've being using offline location tracking using a different app for some time now. This looked like a pretty elegant alternative, so I decided to give it a shot!
The app looks great, and very well thought through. The automation features really appeal to me (disabling tracking at home, automatically changing profiles, etc.)
One thing I wish it had was the ability to associate vehicles with trips (potentially, automatically, based on Bluetooth connections or other triggers). I like to track the category for each of my trips (car, bike, train, walk), as well as the specific vehicle (when applicable).
I haven't tested too much yet, but it looks like you already have pretty robust trip tracking. It would be awesome if I could create a list of vehicles with types, and select a vehicle when starting a trip, or have it automatically set when connecting to a Bluetooth device.
In any case, this app looks great, and I appreciate the effort you're putting into an open source project like this.
Hi mxdcodes. I have been using your app for the past month in a sort of testing phase with Darawich. I have used GPS Logger and Reitti since October last year, which is still running, but Colota offers a lot more exciting possibilities of data collection and so I'll probably switch across pretty soon. I got hit by the bug a while back of it stopping once entering a geofence, but I saw that got fixed promptly so thanks for all of this.
I love all that you and others who code for the (wider) selfhosted community offer, so let me say that for every person criticizing your app and all the effort you have put in, there are hopefully 1000x more of us who are truly grateful for what you and others do. I find it odd that people who are concerned about having their location history hacked by someone are actually wanting to record their location history in the first place. Seems the obvious answer is to... not track your location history with ANY app.
Keep up the good work!
Stabiles Stativ für Podcast-Mikro sucht neues Zuhause. Abholen in Hamburg Altona S-Bahn Königstrasse. 35€
zeitverschreib ⁂ hat dies geteilt.
Waldorf
Als Antwort auf Smudge The Insult Cat 🐀 • • •