I am strongly considering shutting down Pomf because the US Department of Justice continues to manufacture outright lies against people who are innocent until proven guilty.

Running the service (despite my best efforts to mitigate risks well beyond what the law would require me to do up to and including full fledged cybersecurity research) exposes me to some level of legal or criminal threat to my livelihood. I knew this going in five and a half years ago, and the calculation at the time was acceptable because even if the feds came knocking at my door, I was confident the evidence would be in my favor and that a reasonable and functional court system would make the right decision. I was also confident that what happened to Les De Ridder almost eight years ago (archive.is/PJTzS) wouldn't happen here in the USA, because Europe was a communist shithole and we had rights over here.

Well, as the US continues to backslide into a fascist regime with a completely captured judicial branch that is utterly subservient to the executive branch, my evaluation of that risk level compared to my maximum tolerance of risk continues to inch closer and closer to parity, and when that risk exceeds it, I am out. If I am not convinced that I can adequately defend myself against potentially spurious claims and threats due to a corrupt and unequal justice system, then my next defense mechanism is to remove any and all ammunition from those who would try to harm me, and the largest weapons cache someone can bring to bear against me at this time is undoubtedly Pomf. I have never considered the government to be part of my overall threat model, but now I do, and I do not have the energy or resources to fight an entire government at this time despite it being morally the right thing to do.

If this does happen, there will be a reasonable and well defined sunset period, with a final archiving of all Pomf content to cold storage in hopes that in the distant future the risk comes down to a level in which I am comfortable bringing it all back online. I would never wipe Pomf - only make it unavailable at worst.

One last thing - if you think I am some big baby or think I have nothing to fear, consider this simple statement:

If they can do it to them, they can do it to you.

I see Node.js tries to solve the AI slop issue on hackerone like this:

require a Signal of 1.0 or higher

nodejs.org/en/blog/announcemen…

Node.js — New HackerOne Signal Requirement for Vulnerability Reports

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

^nodejs.org