Dreamwidth

Posted by: deniseHello, all! It's December, and that means two things: we made it through another one, and it's time for our annual December holiday points bonus.For the month of December, all orders in the Shop of points and paid time (whether for ... [More] you or as a gift) will have 10% of your completed cart total sent to you in points when you finish the transaction. For instance, if you buy an order of 12 months of paid time for $35 (350 points), you'll get 35 points when the order is complete, to use on a future purchase.This bonus only applies to orders of paid time and points: rename tokens and bonus icon slots don't receive bonuses. If you buy paid time for a friend, the bonus points will be sent to you, not to them.The order must be completed in the month of December. IMPORTANT: "the month of December" is defined by server time (which is in UTC), not by your local time zone. So, for instance, if you're in EST, the promo ends on December 31 at 7PM your time. Every year a few people think that they have more time to make an order than they do, so if you want to take advantage of the promo, it's a good idea to do it before the last day.This is our annual way of saying "thank you" to our supporters. We don't accept advertising, we don't sell your data, and we haven't taken venture capital or outside investment -- and we never will. Even though this year has been a hellscape of one disaster after another in my personal life (and I'm far from being the only one), it's perpetually reassuring to know that even when everything else goes to hell, we all have at least one place on the internet where you never have to worry about ulterior motives. We're in this for the long haul, and y'all have been there with us for the ride. So thank you for another year, and for being the best users anyone could ever hope for. Happy holidays to you all, whichever ones you celebrate, and may 2022 bring us all luck, health, and joy. I'm gonna choose to believe that us remembering to activate the holiday bonus promo before the very last second this year is a good sign.(Comment notification emails may be delayed for an hour or two, due to the high volume of emails generated by a dw_news post. This was posted at 11:45 PM EST/0445 UTC (see in your time zone). Please don't worry about delayed notification emails until at least two hours after that. You may receive multiple copies of this email notification due to a bug we're still trying to squash: we apologize, and we're still working to find the cause!) comments [Less]

Posted by: deniseHello, all! It's December, and that means two things: 2020 the awful hellscape of a year is almost over, and it's time for our annual December holiday points bonus.For the month of December, all orders in the Shop of points and paid ... [More] time (whether for you or as a gift) will have 10% of your completed cart total sent to you in points when you finish the transaction. For instance, if you buy an order of 12 months of paid time for $35 (350 points), you'll get 35 points when the order is complete, to use on a future purchase.This bonus only applies to orders of paid time and points: rename tokens and bonus icon slots don't receive bonuses. If you buy paid time for a friend, the bonus points will be sent to you, not to them.The order must be completed in the month of December. IMPORTANT: "the month of December" is defined by server time (which is in UTC), not by your local time zone. So, for instance, if you're in EST, the promo ends on December 31 at 7PM your time. Every year a few people think that they have more time to make an order than they do, so if you want to take advantage of the promo, it's a good idea to do it before the last day.This is our annual way of saying "thank you" to our supporters. We don't accept advertising, we don't sell your data, and we haven't taken venture capital or outside investment -- and we never will. This year, in among the hellscape of 2020, we've seen a lot of national conversation about the evils of social media and the algorithms that control what we see. Those conversations usually degenerate into me wanting to throw something in under 30 seconds, because they always act as though the giant, corporate-owned, billion-dollar social media properties are the only ones that exist. They aren't, and we've all been proving that together for the last eleven goddamn years. (Oh Lord, where does the time go?) By choosing to upgrade your account, you're part of why we can continue to stand as an independent, user-funded space on the internet where you can be 1000% sure that we're not selling your data or accidentally destroying democracy because The Algorithm™ prefers controversial posts. (I mean, you could be 1000% sure of that no matter what, because we have like eight billion other things to do other than rearrange your reading page to get more pageviews to show the metrics to the advertisers we don't have, but you know what I mean.)So, as always: thank you. Thank you for believing in our experiment, even when this horrible year just keeps screwing us all over. (As an example, I'm currently typing this on my wife's laptop, because I can't get a repair appointment for my dead laptop, because ha! It's 2020!) Thank you all for being a light in the darkness. We hope you all have an excellent December (or at least as excellent as it can get), and whatever holidays you celebrate, we hope that you can find a way to celebrate them safely, virtually, and with as much joy as possible. I'm not going to say that I hope 2021 is better for us all, because I don't want to jinx it, but I've got my fingers crossed.(Comment notification emails may be delayed for an hour or two, due to the high volume of emails generated by a dw_news post. This was posted at 2:45 AM EST/0745 UTC (see in your time zone). Please don't worry about delayed notification emails until at least two hours after that. You may receive multiple copies of this email notification due to a bug we're still trying to squash: we apologize, and we're still working to find the cause!) comments [Less]

Posted by: deniseHello, all! It's December, and that means two things: 2020 the awful hellscape of a year is almost over, and it's time for our annual December holiday points bonus.For the month of December, all orders in the Shop of points and paid ... [More] time (whether for you or as a gift) will have 10% of your completed cart total sent to you in points when you finish the transaction. For instance, if you buy an order of 12 months of paid time for $35 (350 points), you'll get 35 points when the order is complete, to use on a future purchase.This bonus only applies to orders of paid time and points: rename tokens and bonus icon slots don't receive bonuses. If you buy paid time for a friend, the bonus points will be sent to you, not to them.The order must be completed in the month of December. IMPORTANT: "the month of December" is defined by server time (which is in UTC), not by your local time zone. So, for instance, if you're in EST, the promo ends on December 31 at 7PM your time. Every year a few people think that they have more time to make an order than they do, so if you want to take advantage of the promo, it's a good idea to do it before the last day.This is our annual way of saying "thank you" to our supporters. We don't accept advertising, we don't sell your data, and we haven't taken venture capital or outside investment -- and we never will. This year, in among the hellscape of 2020, we've seen a lot of national conversation about the evils of social media and the algorithms that control what we see. Those conversations usually degenerate into me wanting to throw something in under 30 seconds, because they always act as though the giant, corporate-owned, billion-dollar social media properties are the only ones that exist. They aren't, and we've all been proving that together for the last eleven goddamn years. (Oh Lord, where does the time go?) By choosing to upgrade your account, you're part of why we can continue to stand as an independent, user-funded space on the internet where you can be 1000% sure that we're not selling your data or accidentally destroying democracy because The Algorithm™ prefers controversial posts. (I mean, you could be 1000% sure of that no matter what, because we have like eight billion other things to do other than rearrange your reading page to get more pageviews to show the metrics to the advertisers we don't have, but you know what I mean.)So, as always: thank you. Thank you for believing in our experiment, even when this horrible year just keeps screwing us all over. (As an example, I'm currently typing this on my wife's laptop, because I can't get a repair appointment for my dead laptop, because ha! It's 2020!) Thank you all for being a light in the darkness. We hope you all have an excellent December (or at least as excellent as it can get), and whatever holidays you celebrate, we hope that you can find a way to celebrate them safely, virtually, and with as much joy as possible. I'm not going to say that I hope 2021 is better for us all, because I don't want to jinx it, but I've got my fingers crossed.(Comment notification emails may be delayed for an hour or two, due to the high volume of emails generated by a dw_news post. This was posted at 2:45 AM EST/0745 UTC (see in your time zone). Please don't worry about delayed notification emails until at least two hours after that. You may receive multiple copies of this email notification due to a bug we're still trying to squash: we apologize, and we're still working to find the cause!) comments [Less]

Posted by: deniseUPDATE 28 May 2020 12:30PM EDT (jump to original post): We have sent out notices to a number of people who were affected by this alleged LiveJournal password compromise, informing you that you need to change your password. We ... [More] accidentally failed to filter for two scenarios, so:* Some accounts that have been deleted and purged accidentally got sent the password change notice. I am so sorry! You can safely ignore the email regarding any deleted and purged account. This has also made us realize that the user purge function is not properly removing at least one piece of user data (email address) that should be removed when an account is deleted and purged. We apologize profusely for that as well: we didn't look closely at the behavior of that function when we forked from LJ's codebase in 2008 (or since, obviously), and we should have. When this immediate issue is handled, we will closely audit that function to make sure it's nuking everything it should be nuking, and we will go back and remove everything from deleted and purged accounts in our database that should have been removed in the first place.* Some people who had previously reused passwords, but who changed their password on Dreamwidth on or after 26 April 2020 (when we made a number of changes to how we handle and store passwords), accidentally got a copy of the email saying that their password would be reset in 3 days. I apologize for that as well! That was our mistake in forgetting to account for some of the changes in how we handle passwords when we tried to identify the DW accounts that were at risk. We will absolutely make the correction before we force password resets.UPDATE 27 May 2020 3:55PM EDT: LiveJournal has issued a statement including "...we analyzed data appeared and can say that the data may be compiled using different sources and mostly falsified." After reviewing their statement, we are not changing our recommendation that you should consider your LiveJournal passwords compromised.*ORIGINAL POST 26 May 2020 9:15PM EDT: Have I Been Pwned?, the notification service for password breach incidents, has now loaded a file of 26 million accounts containing usernames, email addresses, and passwords that allegedly were taken from LiveJournal at some point several years ago. The information in this file has been available on the black market since at least October of 2018, when we first reported people getting spam extortion emails with passwords in them. Our investigation at the time showed that we were not the likely source of the password data in those extortion emails, and that the likely source was a breach from LiveJournal.Beginning in March of 2020, and again in May of 2020, we saw several instances of Dreamwidth accounts being broken into and used for spam. We believed at the time, and continue to believe, that the source of the password information being used to break into these accounts is the same black-market file that claims to be LiveJournal password data. Every user we asked whether they had used the compromised password on LiveJournal before confirmed that they had.We have no way to tell for sure whether LiveJournal has actually had a data breach, or whether the file that's circulating is real or fake. All we can say for certain is that none of the evidence we've seen has disproven the claim made by the people offering the file that the file contains usernames and passwords taken from LiveJournal. We've contacted LiveJournal about our findings several times, and they've told us each time that they don't believe the situation warrants disclosure to their users. However, at this point we must advise that you treat the file as legitimate and behave as though any password you used on LiveJournal in the past may be compromised.We've seen several contradictory claims about when the file was allegedly gathered from LiveJournal: one claim for June/July of 2014, and one claim for sometime in 2017. From what we've learned from our users who we've spoken to about their accounts, we believe the 2014 claim is more likely to be accurate and that the person(s) who obtained the data in 2014 didn't use it for several years, but we can't say for certain. Because of that uncertainty, it's best if you treat any password you've ever used on LiveJournal in the past as compromised, since we can't tell for certain when the alleged breach happened.Since the first indications in March that someone or someones have been trying the information in that file against Dreamwidth accounts, we've been working to identify and notify the Dreamwidth accounts we felt were most at risk. With the alleged password file now more widely available, and the information loaded into Have I Been Pwned, we will be contacting more Dreamwidth users who may have reused their passwords from LiveJournal to change their passwords and resecure their accounts. If you get an email from us about changing your password that points to this news post, the email is legitimate, and you should change your password as soon as possible, on Dreamwidth and on any other site you may have used it on, including LiveJournal. To verify that any password email you receive is actually from us, log into your Dreamwidth account and visit the home page or dw_news, and look for a post like this one confirming that the message is legitimate.We'd also like to urge you to regularly look up your email addresses in Have I Been Pwned? to see if your information appears in this (or any other!) password breach. It's a legitimate site that provides a valuable security resource.*All comments to security-related posts are automatically screened. If you need to contact someone about your account, please open a support request in the Terms of Service category, and someone will get back to you as soon as possible. Comment notification emails may also be delayed for up to several hours after a news post is posted. (We think we've managed to squash the receiving-multiple-copies-of-news-post-emails problem this time, but if you get multiple copies again, we're sorry!)(EDIT: Yup, this fix didn't work either and we're still sending multiples. We're still sorry!) comments [Less]

Posted by: deniseUPDATE 28 May 2020 12:30PM EDT (jump to original post): We have sent out notices to a number of people who were affected by this alleged LiveJournal password compromise, informing you that you need to change your password. We ... [More] accidentally failed to filter for two scenarios, so:* Some accounts that have been deleted and purged accidentally got sent the password change notice. I am so sorry! You can safely ignore the email regarding any deleted and purged account. This has also made us realize that the user purge function is not properly removing at least one piece of user data (email address) that should be removed when an account is deleted and purged. We apologize profusely for that as well: we didn't look closely at the behavior of that function when we forked from LJ's codebase in 2008 (or since, obviously), and we should have. When this immediate issue is handled, we will closely audit that function to make sure it's nuking everything it should be nuking, and we will go back and remove everything from deleted and purged accounts in our database that should have been removed in the first place.* Some people who had previously reused passwords, but who changed their password on Dreamwidth on or after 26 April 2020 (when we made a number of changes to how we handle and store passwords), accidentally got a copy of the email saying that their password would be reset in 3 days. I apologize for that as well! That was our mistake in forgetting to account for some of the changes in how we handle passwords when we tried to identify the DW accounts that were at risk. We will absolutely make the correction before we force password resets.UPDATE 27 May 2020 3:55PM EDT: LiveJournal has issued a statement including "...we analyzed data appeared and can say that the data may be compiled using different sources and mostly falsified." After reviewing their statement, we are not changing our recommendation that you should consider your LiveJournal passwords compromised.*ORIGINAL POST 26 May 2020 9:15PM EDT: Have I Been Pwned?, the notification service for password breach incidents, has now loaded a file of 26 million accounts containing usernames, email addresses, and passwords that allegedly were taken from LiveJournal at some point several years ago. The information in this file has been available on the black market since at least October of 2018, when we first reported people getting spam extortion emails with passwords in them. Our investigation at the time showed that we were not the likely source of the password data in those extortion emails, and that the likely source was a breach from LiveJournal.Beginning in March of 2020, and again in May of 2020, we saw several instances of Dreamwidth accounts being broken into and used for spam. We believed at the time, and continue to believe, that the source of the password information being used to break into these accounts is the same black-market file that claims to be LiveJournal password data. Every user we asked whether they had used the compromised password on LiveJournal before confirmed that they had.We have no way to tell for sure whether LiveJournal has actually had a data breach, or whether the file that's circulating is real or fake. All we can say for certain is that none of the evidence we've seen has disproven the claim made by the people offering the file that the file contains usernames and passwords taken from LiveJournal. We've contacted LiveJournal about our findings several times, and they've told us each time that they don't believe the situation warrants disclosure to their users. However, at this point we must advise that you treat the file as legitimate and behave as though any password you used on LiveJournal in the past may be compromised.We've seen several contradictory claims about when the file was allegedly gathered from LiveJournal: one claim for June/July of 2014, and one claim for sometime in 2017. From what we've learned from our users who we've spoken to about their accounts, we believe the 2014 claim is more likely to be accurate and that the person(s) who obtained the data in 2014 didn't use it for several years, but we can't say for certain. Because of that uncertainty, it's best if you treat any password you've ever used on LiveJournal in the past as compromised, since we can't tell for certain when the alleged breach happened.Since the first indications in March that someone or someones have been trying the information in that file against Dreamwidth accounts, we've been working to identify and notify the Dreamwidth accounts we felt were most at risk. With the alleged password file now more widely available, and the information loaded into Have I Been Pwned, we will be contacting more Dreamwidth users who may have reused their passwords from LiveJournal to change their passwords and resecure their accounts. If you get an email from us about changing your password that points to this news post, the email is legitimate, and you should change your password as soon as possible, on Dreamwidth and on any other site you may have used it on, including LiveJournal. To verify that any password email you receive is actually from us, log into your Dreamwidth account and visit the home page or dw_news, and look for a post like this one confirming that the message is legitimate.We'd also like to urge you to regularly look up your email addresses in Have I Been Pwned? to see if your information appears in this (or any other!) password breach. It's a legitimate site that provides a valuable security resource.*All comments to security-related posts are automatically screened. If you need to contact someone about your account, please open a support request in the Terms of Service category, and someone will get back to you as soon as possible. Comment notification emails may also be delayed for up to several hours after a news post is posted. (We think we've managed to squash the receiving-multiple-copies-of-news-post-emails problem this time, but if you get multiple copies again, we're sorry!)(EDIT: Yup, this fix didn't work either and we're still sending multiples. We're still sorry!) comments [Less]

Posted by: deniseYesterday, we made a post in dw-maintenance about a collection of Dreamwidth accounts that had been broken into and used for spamming. (If you haven't read that post yet, please read it now!) We suspended the hijacked accounts we ... [More] were able to identify as definitely compromised, and if yours was one of them, please open a support request in the Terms of Service category and we'll help you resecure it.After additional research, we're highly confident the account breakins were due to people using the same password for their Dreamwidth account as one they'd previously used on another social networking site. However, because the other site hasn't notified its users of any data breach, we can't say for certain they're the source of the password data -- we can only look at the circumstantial evidence. Because many Dreamwidth users also have accounts on the site in question, we'll be working over the next few days to fully evaluate the risk to you, and we may notify the people we believe are at higher risk for an account breakin. You may get an email from us about this -- if you do, please follow the instructions in it. As we learn more, it may become necessary at some point to forcibly expire some people's login sessions or reset their passwords for them. We don't currently predict needing to do this, but it's a possible step we may need to take in the future. Please check right now to make sure the email address confirmed on your account is an address where you can get mail. If it isn't, change it to your current email address.If you've ever used your current Dreamwidth password on any other site, or if you aren't sure if you have or not, please change your Dreamwidth password for all your accounts as soon as you can. Again, we're highly confident we're not the source of the password compromise, but there are people who take the information from other sites who have had a password breach and try them elsewhere. We strongly recommend using strong, randomly-generated, unique passwords for each different site you have an account on, and downloading and using a reputable password manager such as Dashlane, 1Password, Keeper, LastPass, or Zoho to generate and store your passwords for you.The tl;dr summary for what you should do for all your accounts:* Check your current email address, and change it if you can't get mail there.* Change your Dreamwidth password if you've ever used it anywhere else, or aren't sure if you have or not.* Share these steps with your friends who aren't subscribed to dw_news or don't receive emails when we post a new dw_news post, and ask them to do the same.All comments to this particular post will be automatically screened. If you need to contact someone about your account, please open a support request in the Terms of Service category and we'll get back to you as soon as we can.EDIT: We're sorry if you received multiple emails about this! Obviously the thing we tried in hopes it would make the problem better has just made it happen to more people. The same problem has extended the usual notification delay after a news post signficantly longer. We'll get it fixed as soon as we can. comments [Less]

Posted by: deniseYesterday, we made a post in dw-maintenance about a collection of Dreamwidth accounts that had been broken into and used for spamming. (If you haven't read that post yet, please read it now!) We suspended the hijacked accounts we ... [More] were able to identify as definitely compromised, and if yours was one of them, please open a support request in the Terms of Service category and we'll help you resecure it.After additional research, we're highly confident the account breakins were due to people using the same password for their Dreamwidth account as one they'd previously used on another social networking site. However, because the other site hasn't notified its users of any data breach, we can't say for certain they're the source of the password data -- we can only look at the circumstantial evidence. Because many Dreamwidth users also have accounts on the site in question, we'll be working over the next few days to fully evaluate the risk to you, and we may notify the people we believe are at higher risk for an account breakin. You may get an email from us about this -- if you do, please follow the instructions in it. As we learn more, it may become necessary at some point to forcibly expire some people's login sessions or reset their passwords for them. We don't currently predict needing to do this, but it's a possible step we may need to take in the future. Please check right now to make sure the email address confirmed on your account is an address where you can get mail. If it isn't, change it to your current email address.If you've ever used your current Dreamwidth password on any other site, or if you aren't sure if you have or not, please change your Dreamwidth password for all your accounts as soon as you can. Again, we're highly confident we're not the source of the password compromise, but there are people who take the information from other sites who have had a password breach and try them elsewhere. We strongly recommend using strong, randomly-generated, unique passwords for each different site you have an account on, and downloading and using a reputable password manager such as Dashlane, 1Password, Keeper, LastPass, or Zoho to generate and store your passwords for you.The tl;dr summary for what you should do for all your accounts:* Check your current email address, and change it if you can't get mail there.* Change your Dreamwidth password if you've ever used it anywhere else, or aren't sure if you have or not.* Share these steps with your friends who aren't subscribed to dw_news or don't receive emails when we post a new dw_news post, and ask them to do the same.All comments to this particular post will be automatically screened. If you need to contact someone about your account, please open a support request in the Terms of Service category and we'll get back to you as soon as we can.EDIT: We're sorry if you received multiple emails about this! Obviously the thing we tried in hopes it would make the problem better has just made it happen to more people. The same problem has extended the usual notification delay after a news post signficantly longer. We'll get it fixed as soon as we can. comments [Less]

Posted by: deniseHello, all! It's December, and if you've been here before, you know what that means: it's time for our annual holiday points bonus. For the month of December, all orders in the Shop of points and paid time (whether for you or as a ... [More] gift) will have 10% of your completed cart total sent to you in points when you finish the transaction. For instance, if you buy an order of 12 months of paid time for $35 (350 points), you'll get 35 points when the order is complete, to use on a future purchase.This bonus only applies to orders of paid time and points: rename tokens and bonus icon slots don't receive bonuses. If you buy paid time for a friend, the bonus points will be sent to you, not to them.The order must be completed in the month of December. IMPORTANT: "the month of December" is defined by server time (which is in UTC), not by your local time zone. So, if you're in EST, the promo ends on December 31 at 7PM your time. Every year a few people think that they have more time to make an order than they do, so if you want to take advantage of the promo, it's a good idea to do it before the last day.(Speaking of thinking we had more time than we did, we got hit by that this year: we all thought it was still November, so we hadn't activated the bonus yet until just now. Anyone who completed an order yesterday or this morning before we turned the bonus on didn't automatically get the points, but I have a list of all the carts that were affected and I'll be manually sending out the bonus points. Sorry about that! I'm genuinely surprised it took 10 years for that to happen...) This is our annual way of saying "thank you" to our supporters. We don't accept advertising, we don't sell your data, and we haven't taken venture capital or outside investment -- and we never will. These past years have really proven how terrible the consquences for the internet and for society as a whole can be when our online social spaces are controlled by mega-corporations and dark-money advertisers. By choosing to upgrade your account, you help us continue to stand against that trend and keep the lights on in a space where you can be 100% confident the only special interests influencing us are my cats trying to get me to make room so they can sleep on the warmth of the laptop. From the bottoms of our hearts, thank you.We hope you all have an excellent December, and whatever holidays you celebrate, may they be full of joy! Here's to a wonderful 2020 for us all.(Comment notification emails may be delayed for an hour or two, due to the high volume of emails generated by a dw_news post. This was posted at 1645/4:45PM EST (see in your time zone). Please don't worry about delayed notification emails until at least two hours after that.) comments [Less]

Posted by: deniseHello, all! It's December, and if you've been here before, you know what that means: it's time for our annual holiday points bonus. For the month of December, all orders in the Shop of points and paid time (whether for you or as a ... [More] gift) will have 10% of your completed cart total sent to you in points when you finish the transaction. For instance, if you buy an order of 12 months of paid time for $35 (350 points), you'll get 35 points when the order is complete, to use on a future purchase.This bonus only applies to orders of paid time and points: rename tokens and bonus icon slots don't receive bonuses. If you buy paid time for a friend, the bonus points will be sent to you, not to them.The order must be completed in the month of December. IMPORTANT: "the month of December" is defined by server time (which is in UTC), not by your local time zone. So, if you're in EST, the promo ends on December 31 at 7PM your time. Every year a few people think that they have more time to make an order than they do, so if you want to take advantage of the promo, it's a good idea to do it before the last day.(Speaking of thinking we had more time than we did, we got hit by that this year: we all thought it was still November, so we hadn't activated the bonus yet until just now. Anyone who completed an order yesterday or this morning before we turned the bonus on didn't automatically get the points, but I have a list of all the carts that were affected and I'll be manually sending out the bonus points. Sorry about that! I'm genuinely surprised it took 10 years for that to happen...) This is our annual way of saying "thank you" to our supporters. We don't accept advertising, we don't sell your data, and we haven't taken venture capital or outside investment -- and we never will. These past years have really proven how terrible the consquences for the internet and for society as a whole can be when our online social spaces are controlled by mega-corporations and dark-money advertisers. By choosing to upgrade your account, you help us continue to stand against that trend and keep the lights on in a space where you can be 100% confident the only special interests influencing us are my cats trying to get me to make room so they can sleep on the warmth of the laptop. From the bottoms of our hearts, thank you.We hope you all have an excellent December, and whatever holidays you celebrate, may they be full of joy! Here's to a wonderful 2020 for us all.(Comment notification emails may be delayed for an hour or two, due to the high volume of emails generated by a dw_news post. This was posted at 1645/4:45PM EST (see in your time zone). Please don't worry about delayed notification emails until at least two hours after that.) comments [Less]

Posted by: deniseHello, Dreamwidth! It's kind of amazing: today is the 10th anniversary of our official launch. A decade ago tonight, mark and I were sitting at the table in my old apartment and looking at each other like we couldn't decide if we ... [More] were going to cheer or faint when we opened the doors to our labor of love and invited y'all in. We had no idea if it was going to work or if Dreamwidth would fizzle and then sink, but we were willing to take the leap and try.Ten years later, in addition to the changes in our personal lives (weddings for both of us -- not to each other -- and babies for mark, among many other ups and downs!) you've all been here for PayPal shenanigans, importer disasters, experimental features that worked and experimental features that were promptly consigned to the dustbin where they belonged, deliberate DDoSes, that one time somebody's college homework accidentally DDoSed us, and wave after wave of people discovering that other social media sites don't have their best interests at heart and coming to try our way instead. It's been a hell of a ride. I think it's safe to say we've proven that our wild dream of ad-free, user-supported social media is possible. So here's to another 10 years and more of community, connections, and not having to worry about who your personal information is going to be sold to next. As a birthday present, and to thank those of you whose payments let us stay the independent and principled company we try to be, we've raised icon limits and image hosting quota for paid and premium paid accounts. Paid accounts can now have up to 150 icons and 1.5 GB of image hosting, and premium paid and seed accounts can have up to 300 icons and 3 GB of image hosting. Go forth and do great things with them! (If your icons page is still showing that some icons are inactive despite the quota change, hang tight; we're looking into that.)Tonight's code push included a number of changes, including more progress on making the site display well on mobile devices, lots of tweaks to journal styles to make them more customizable, a better in-browser editor for those programming S2 styles from scratch, adding new services to the profile page and whitelisting widget embeds from more sites around the internet, a TON of under-the-hood work that moves us further along on a few of our most-wanted goals, and fixing a bunch of bugs both major and minor -- you can check out the code tour tag in dw_dev for more detailed information. (We have a few known issues still outstanding from the push, but they're pretty minor, and we'll get them fixed in the next few days. If you spot something else, comment on our maintenance post.)To celebrate our birthday, we'd love to hear your best stories of awesome experiences you've had on Dreamwidth in the past ten years. Tell us about your best moments, whether it's the RP game that succeeded beyond your imagination or the time you met the love of your life through the Latest Things page! We'd love to hear all your stories. (Comment notification emails may be delayed for an hour or two, due to the high volume of emails generated by a dw_news post. This was posted at 0110/1:10 AM EST (see in your time zone). Please don't worry about delayed notification emails until at least two hours after that.) comments [Less]