FYI Air Canada violated the provincial Consumer Protection Act!

Québec Court of Appeal is ordering Air Canada to pay passengers more than $10M in damages in a class-action lawsuit that alleged passengers were charged higher amounts than the ticket price advertised: cbc.ca/news/canada/montreal/ai… #baitandswitch #cdnpoli #polcan #polQC #QCpoli #assnat

The Web Applications Working Group published UI Events KeyboardEvent key Values and UI Events KeyboardEvent code Values:as W3C Recommendations.

key Values defines the key attribute values that must be used for KeyboardEvent’s key attribute. The code value contains information about the key event that can be used to identify the physical key being pressed by the user.

Read more at:
w3.org/news/2025/ui-events-key…

I know Chrome is the browser everybody loves to hate, but I think most would agree this would be very bad.

axios.com/2025/04/23/open-ai-g…

Canadians now labelling American food with a “T” in a black triangle symbol if it’s impacted by tariffs.

#food #tariffs #FascistAmeriKKKa #fascism #GreedyBastards #politics

Question to people doing electronics and other fields using very small units: do you use the name "thou" or "mil" for the unit representing 1⁄1000 inch?

Considering adding this in unit list in @GIMP. Wikipedia seems to say that Thou is more common globally (but North America) and it looks like @FreeCAD (a good reference!) uses "Thou" too.

Yet a reporter insists that "mil" is more common and that "thou" wouldn't be understood by engineers.
So which is it? 😄

en.wikipedia.org/wiki/Thousand…

small unit of length in the imperial and US customary systems

^{Contributors to Wikimedia projects (Wikimedia Foundation, Inc.)}

Updated #curl bug bounty stats, six years in:

520 reports
78 confirmed security vulnerabilities
104 "informative" reports, bugs that weren't vulnerabilities
11 marked as "AI slop"

The rest were just different kinds of not applicable. Some more crazy than others.

The latest confirmed curl vulnerability (CVE-2025-0725) was reported 90 days ago.

There is currently zero issues in our queue.

curl.se/docs/bugbounty.html

Boom, Movim 0.30.1 is out! ✨

In this new release you'll find a new avatar and banner configuration panel, animated GIF support in the picture proxy and some more improvements in the internal color palette management 🎨

Movim is also now supports the XEP-0392: Consistent Color Generation that allows you to have the same default color for your contacts between all the XMPP clients ☺️!

And as always bug fixes and improvements 😌

The complete release note on our blog: mov.im/community/pubsub.movim.…

#xmpp #release #movim

Any accessibility additions is a win for everyone!

Valve announces accessibility tags for Steam - Can I Play That?

caniplaythat.com/2025/04/23/va…

#Valve #Accessibility #Steam #PC #Gaming

PureOS Crimson Progress Update 🚀

Since July 2024, we’ve built a strong foundation—now climbing the stack!

March highlights:

• Faster USB charging
• Smoother touchscreen
• Speedier storage access

PureOS developer Sebastian Krzyszkowiak tackled major package updates, syncing key components from Debian Bookworm and patching PureOS-specific enhancements for devices like the Librem 5.

First alpha release coming soon. Stay tuned.

🔗 Learn More Here: puri.sm/posts/pureos-crimson-d…

#AndroidAppRain at apt.izzysoft.de/fdroid today with 15 updated and 1 added apps:

* Calculator: calculator, unit converter, time converter, currency converter… 🛡️

4 #Magisk modules were updated at apt.izzysoft.de/magisk

Enjoy your #free #Android #apps with the #IzzyOnDroid repo

IzzyOnDroid F-Droid Repository

This is a repository of apps to be used with your F-Droid client. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github, GitLab, Codeberg).

^{IzzyOnDroid App Repo}

My @thunderbird regularly marks some S/MIME-signed mails with:

"Digital Signature is not valid!"

#TIL the reason: these mails are signed with sha1-algorithm which is considered insecure since TB 115.

There is a config to accept such signatures, see blog.thunderbird.net/2023/10/t…

However, I think the error message:

"There are unknown problems with this digital signature." is suboptimal.

Seems like an easy issue to fix, but on the other hand I was not even able to finde the appropriate repo. 😬

Thunderbird 115 and Signatures Using The Obsolete SHA-1 Algorithm

A change was made in Thunderbird 115.0 that rejects the use of the SHA-1 algorithm in digital signatures of S/MIME emails.

^{Kai Engert (The Thunderbird Blog)}

I get asked a lot what's in my gigging template, so here's a demo of just that. Sorry it's so long, got a bit carried away.

Download: onj.me/media/Onj's%20Gigging%2…

I noticed a bug in our binutils port that had been generating semi-randomly broken branch relaxation trampolines for decades.

Why did it take so long to notice this code generation bug? The branch has to reach farther than +-32MB for the branch relaxation trampoline generation to kick in. And even then not all branches were affected (the type of relocation affected it, it had to be in a link library in a specific kind of segment and not in the beginning of it). Finally, for it to actually come into play, the branch had to actually be taken, too.

What did it do wrong then? It added the offset to the target function in the link library .text segment twice. So instead of jumping to the intended function it jumped somewhere random after that. Funnily, the jump might end up hitting some code that did not crash, but did something unintended. For you all non-developer peeps: That is very, very bad.

Fun features of this bug: Since whether the trampoline was generated or not depended on the order of object code and from where the affected call was being made, the bug would pop in and out of existence even on the smallest changes to the code or link libraries. If you know a thing about debugging, this is not very conducive to locating bugs.

Needless to say this one took a lot of head scratching to finally figure out. The fix was a change on a single line.

This bug was old enough to get into bars and drink alcohol legally.

EDIT: Oops, this was supposed to be a reply to this post: infosec.exchange/@harrysintone… - so added some context.

#bugstories #bugs #development #coding

Harry Sintonen (@harrysintonen@infosec.exchange)

Attached: 1 image The feeling when you notice a bug in your binutils port that has been generating semi-randomly broken branch relaxation trampolines for decades. #programming #coding #oops

^{Infosec Exchange}

With Andor s2 about to drop, it's good to keep in mind that in spite of popular assumptions, the Galactic Empire isn't based on the Nazis. George Lucas was very explicit that it's in fact supposed to represent the United States.

cbr.com/george-lucas-vietnam-w…

Star Wars Was A Vietnam War Allegory

One of George Lucas' main influences for the original Star Wars trilogy was the Vietnam War and the United States' involvement in the conflict.

^{Robert Vaux (CBR)}

Meet the Librem 14—The Road Warrior of Secure Computing

Powered by PureOS, Librem 14 is privacy-first:
✔️ No surveillance
✔️ No data mining
✔️ Physical kill switches
✔️ Coreboot BIOS
✔️ PureBoot + Librem Key

Learn more/purchase: puri.sm/products/librem-14/

At Djangocon, we ask ourselves WWCD: what would curl do?

"so whenever you have some network issue, you must ask yourself what would curl do? because it is the gold standard of network programming"

@bagder

Did you catch the recent ACB Vispero Presentation - Manage Windows 11 notifications with JAWS? In case you missed it, the archive is now available: acb-community.pinecast.co/epis…

#FreedomScientificTraining #JAWS

20250410 Vispero Presentation - Manage Windows 11 notifications with JAWS

Originally Broadcasted April 10, 2025, on ACB Media 5

^{ACB Community}

A cracked phone screen doesn't mean you need a new phone! Instead, choose #repair or refurbishment—it's better for your wallet, and the planet.

Repairing will refresh your device, but when you do replace it, remember to trade it in to somewhere like Back Market. Instead of ending up in a landfill, it'll find a new home in someone else's pocket (and put some money in yours!). This enables phones to stay in use for 10 years, saving cost and energy.

Learn more on our blog: ifixit.com/News/109306/fix-it-…

END OF 10

"Support for Windows 10 ends on October 14, 2025.

Microsoft wants you to buy a new computer.

But what if you could make your current one fast and secure again?

If you bought your computer after 2010, there's most likely no reason to throw it out. By just installing an up-to-date GNU/Linux operating system you can keep using it for years to come.

Installing an OS may sound difficult, but you don't have to go it alone! With any luck, there are people in your area ready to help!"

endof10.org/

#Microsoft #Windows #Windows10 #Windows11 #Linux #FOSS

A verified ID is required to access AI models in OpenAI's API to prevent IP theft. 😂 They went from stealing everything from everyone to now claiming it's their original work, despite hundreds of pending copyright cases against them in the courts. Why is this even allowed? That's hypocrisy at best.

#ai