@RachaelAva1024 GitHub's sponsorship of our CI setup is worth a lot of money that we do not willingly just throw away. It would be a real blow to the project to switch to codeberg.
Fair enough. But do consider that if you switch to Codeberg, it does use Forgejo as the backend, so if you need to switch away from Codeberg to a self-hosted Forgejo instance, the build CIs for Forgejo that you would have built on Codeberg should still work, so you wouldn't have to scrap all the build CIs again, you should be able to reuse those again.
(I'm not too familiar with the inner workings on Forgejo, so correct me if I'm wrong)
Of course, that depends on whether you want to migrate cURL to Codeberg. We (as the community) would love to have you on there, but if not, that's okay.
Crunch, I'd even be okay if you set up an official mirror on Codeberg that mirrors the GitHub repo. At least then the root source code isn't nuked if GitHub goes down.
But that's all up to you. I trust that you will do what's in the best interest for the FOSS community.
@RachaelAva1024 the source code would survive even if GitHub went dark this instant: we have it cloned in countless places so it we rehost it elsewhere in minutes if we want to
@RachaelAva1024 No significant project lacks redundancy like this. It's just inherent to how git works. Everyone working on a project has a full copy of its history and all you need to know yours matches someone else's (modulo sha1 attacks) is the hash of the last commit in common.
for the record, my "yes" answer to this question is because I think the slightly lowered barrier to entry for newcomers that GitHub offers currently outweighs all the negative factors of remaining on GitHub, and lending GitHub the legitimacy of hosting the curl project. It's not because I think GitHub is good.
For Open Source Projects, I think these all should run their own Forgejo instance, so we can build a federated Github replacement - just like we did with Mastodon vs Twitter.
I doubt that it will be *lots* of additional work, but I see your point. Disclaimer: I am part of a team running free-to-use federated infra structure for Java User Groups, so I well know what the actual costs are. Maybe then codeberg will be interesting for you, which imposes *no* work on the developer, but still is perfectly democratic and open?
YMMV - Let's agree to disagree. Anyway, no need to convince each other, as still there are great options in the hosted area besides Github, like codeberg or Gitlab.
Reminder: Please join us for our monthly webinar scheduled for tonight, Tuesday, July 1 at 7:00 PM Eastern Time. Weβll be demonstrating the new Podcasts app which is included in the newest BT Speak update. You will also have a chance to ask questions and provide feedback to the team at Blazie Technologies. We might even have some breaking news about the upcoming BT Braille!! Below is the Zoom meeting link. us02web.zoom.us/j/81033758140?β¦
Meeting ID: 810 3375 8140 Passcode: 024541
One tap mobile +13017158592,,81033758140#,,,,*024541# US (Washington DC)
Dial by your location β’ +1 301 715 8592 US (Washington DC)
Today I got to speak at the accessible banking conference in Brussels, organised by the European Blind Union and AccessibleEU, on a panel about making banking services actually work for everyone. I was joined by @ErikGustafsson and @DanielGoransson from #AxessLab, Hendrik Bourgeois from #Mastercard, and moderator Anna Martin from #BEUC. Axess Lab kicked things off with a fantastic demo of a public touchscreen that starts speaking as soon as you explore it with your finger. That alone could solve a lot of the problems blind people face with lockers, kiosks, and terminals that currently rely only on visuals. We talked about how inaccessible systems arenβt just annoyingβtheyβre risky. If you have to tell your PIN to someone else just to pay, somethingβs seriously wrong. Another strong point was that accessibility isnβt something you can just add on at the endβit has to be part of how teams work, from product design to customer support. Otherwise, it just doesnβt stick well.
@miki holding a finger can trigger tts. it doesn't need to echo your results, only instructions for generating the PIN. Lots of potentialities for feeding that back: vibrations, counting taps, tonnes of workarounds.
@cachondo Do you think those complicated input methods would be usable by e.g. your average Blindshell user? Think 60-year-old, can sort of figure out tech when their nephew teaches them how, has always paid with their credit card, but isn't good about following complex instructions.
@miki Some of them, perhaps. In the UK, contactless payments have significantly overtaken Chip and PIN for in-store transactions. Contactless payments accounted for 76% of debit card transactions and 63% of credit card transactions last year, for example, reducing the necessity for PIN in many instances.
@miki haptics? Essentially buzz everytime you shift from one number to the next so you can map out the keypad, then painstakingly enter the four digits? Not great but like you I can't really think of another way. I actually soft-ran into this with an in-flight entertainment system the other week, it had a screen reader but I had no 3.5mm headphones to set up bluetooth :)
This is a repository of apps to be used with your F-Droid client. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github, GitLab, Codeberg).
What's Changed
Add detected drivers to /info endpoint by @jsuchal in #603
GET /certificates endpoint by @celuchmarek in #607
Custom TL sync strategy to validate tsl signature by @celuchmarek in #6...
Cloudflare has announced that it will now block AI web crawlers by default for new customers. Itβs also introducing a new βPay Per Crawlβ fee that will let some publishers make AI companies pay to scrape their content.
Vznika tu mezidruhove pratelstvi? Chysta se souboj? Podeli se orel s orlosupem o mrsinu mysi v soudruzskem sdileni? Nebo si jenom stezuji na velikost klece, partnerstvo, a holubi provokujici orla v krmitku naproti klecim?
Rozuzleni prijde vzapeti. Orel zautoci a potvrdi dominanci ciste rasy. Orlosup je vyhnan na druhou stranu klece a na mrsinu si muze nechat zajit chut. Tady je svet jeste v poradku.
@gnome I just noticed the disability pride flag in the profile picture, I didn't expect it but I love it! Especially as I know it's important for many members of our community, like myself.
Despite the accessibility issues of our project and despite misinformed critics (I have no issue with informed critics), I know we are actively working on better accessibility, and that it's particularly implemented by disabled members of the GNOME community.
July means itβs time to hit the road for the conventions of the American Council of the Blind and the National Federation of the Blind. Jenine Stanley and Everette Bacon go over everything youβll need to know from traveling to and from Dallas and New Orleans to where we are in the respective exhibit halls and when you can catch our workshops, plus a convention deal from the Customer Care team. But wait! Thereβs more! Itβs βAira on the Go!β With our Q3 Giveaway. Find out what you could win just by using one of our transportation-related offers.
Episode Notes
Airacast July 2025
Convention Time!
July means itβs time to hit the road for the conventions of the American Council of the Blind and the National Federation of the Blind.
There's some slightly confusing messaging on Freedom Scientific's convention specials page. vispero.com/events/acb-2025/ It states: " 10% off all Home Annual Licenses and Home Time-Based SMA s"
For kicks, I called FS to see if there was a chance that I could renew my license a day earlier before the discounts kick in. The salesperson I spoke withh was very nice but said that this was for new license purchasers. I thought I missed this but their Web site clearly does not indicate this and I really believe that it should if this is the case. He said that I could purchase a new license but this would change my serial number. Many JAWS users wouldn't care if their serial number changed if it meant getting a license at a discount. However, I have lots of third party software from Hartgen Consultancy that is tied to my current serial number. I know I could ask Hartgen Consultancy if they could substitute my old serial number with the new one but I might have to do the same thing again in a year if FS only offers discounts for new license purchases. I told the salesperson, who again was extremely nice and very professional, that I wasn't going to quibble over a 10% discount but I suggested that they change the messaging on their Web site to reflect this to avoid calls from upset users who will be unable to renew their home annual license at the discounted price. I told him that I personally felt that they should honor it based on their Web site's messaging but that I wasn't willing to get into a fight over around a $10.00 discount. Other users will, however, and FS really needs to look at this. The bottom line is that either their Convention Specials Web page should indicate that this discount is for new purchases of a Home Annual license or they should allow current Home Annual license holders to renew with the discounted price if they won't change the messaging on the Web page.
ACB 2025 Convention Activity Schedule Vispero is delighted to be a sponsor and exhibitor at the 2025 ACB National Convention! Weβre looking forward to connecting with you in Dallas, TX! Be sure to check the ACB Convention website for information on rβ¦
I agree with everything you're saying here about the Home Annual License. I feel as of late, from what it seems, Freedom Scientific hasn't been very good at communicating all of the details about their products, in small fine print on their website, if you get what I'm saying, and in a way, this is only an opinion, but that's bad for business.
Does anyone happen to know what values I'd put in an `upgrade` HTTP response header when sending an HTTP 426 to tell a client that it needs to upgrade to TLS 1.2 or 1.3?
...but I can't find any examples. The `upgrade` spec says the format of the value is `protocol-name ["/" protocol-version]` - so presumably e.g. `TLS/1.3`? httpwg.org/specs/rfc9110.html#β¦
It won't work for old clients obv but...trying to be correct.
@bagder Thanks π. Yeah same TBH, I'm more doing it to try to be correct - just in case. It'd be my luck to encounter the one and only weird client that does something with it π€£
@SimmerVigor @bagder Ah perfect, thanks Lucas - that's a massive help. Through all this, I am not sure there's a very good method for a server to communicate to a client that the version of TLS (or ciphersuites I guess) the client supports isn't modern/good enough. I dearly wish there was...
@SimmerVigor I think typically a server that thinks TLS v1.X is not good enough will simply not negotiate said version so there will never be a HTTP reply using it... For reference, see TLS 1.1 and TLS1.0 treatment in the world.
@bagder @SimmerVigor Agreed. We're doing a trial of retiring TLS 1.0 & 1.1 which is a soft disabling - We'll return a custom error page with info & a path to contact us for any requests to our websites over 1.0 or 1.1. Obv this means we complete the HTTP request/response which gives us the opportunity to be more helpful to the client. TBH, until our TLS lib removes 1.0/1.1 it *could* stay like this. I'm basically just trying to "bring the audience with us" as far as possible.
It's official, jacket FM is now a read only app. I wanted to test it and see if I could put anything out there and it says HTTPError: Request failed with status code 405: POST jacket.fm/upload. I was expecting that because today is the day that it was going to happen. At least we can look through all the posts on this app.
The progress bars in F-Droid's new design look odd. Did some research into the material 3 spec and why there's a strange blue dot at the end: gitlab.com/fdroid/fdroidclientβ¦
Maybe someone wants to improve the colour choices here?
Device OS and version: Lineage 22.1 Device model/manufacturer: Fairphone 4 F-Droid version (in the About screen): 1.23.0-alpha0 F-Droid privileged extension version (if...
Vivaldi browser comes packed with smart features including desktop-style tabs, a built-in Ad Blocker, protection against trackers, and a private translator.
I asked Google for the quote about cheese from a Christmas Carol.
"What is the matter?" said Scrooge, with his usual voice. "Nothing particular," said Scrooge. "Something, I think?" the ghost insisted. "No," said Scrooge, "No. I should like to be able to say a word or two about a crumb of cheese, many years ago."
### **Summary**
A logic flaw in `libcurl` version **8.14.1** allows an attacker to bypass restrictive HTTP proxy firewalls by "tunneling" an arbitrary HTTP verb within a `CONNECT` request. By...
this one reminds me of the "vulnerability reports" we would sometimes get when I worked at Telegram. Where someone would claim that it's a severe vulnerability that messages, including ones from secret chats, are stored unencrypted in a database that is only accessible on rooted/jailbroken devices. And that was before AI. People would write these by hand and never stop to think it through.
"... As temperatures increase across Japan, residents and tourists in the western region of Okayama are embracing a delightful and traditional way to cool down, Nagashi Somen, a treasured summer ritual in Japan.
In the lovely Yamanori Valley of Maniwa City, a restaurant with over 40 years of history has reopened for the season, offering guests the chance to enjoy Nagashi Somen.
These thin wheat noodles flow down a bamboo conduit filled with icy spring water. Diners use chopsticks to catch the noodles as they pass by, dip them in a savoury broth or a thin soup, and gulp them down in true Japanese fashion."
and Google is probably shitting in their pants because of the huge fine they might pay. Scary. Better to leave them, it's not even good and let their revenue slowly decreasing
sry to say this tuta: but privacy in germany is a ticking time bomb. maybe for EU reasons its still better than US but for sure not because german gov likes this / wants this or even remotely cares. if they cant pass Vorratsdatenspeicherung, they gonna abuse anything else to change this as quickly as possible. and who knows what they enforce upon you about longterm backups even years in future. like most ISP's in DE log connections and not because they need to but because they want or got paid todo it. if i cant trust this country how should i trust a company operating in it? also comparing yourself against the worst seems weird for me. why not compare against the privacy aware competitors? EDIT: also there are serious efforts to undermine encryption in general. EDIT2: sry that was maybe way to harsh and i'm happy alternatives are growing. its the current political movement and the ongoing shift to the right that makes me really worried what would happen to companies if germany goes 1933 again
hope its okay to ask but the advertised E2E encryption who has/saves the keys? is it like US based common messenger (pretty sure its clear which one i mean) that advertises E2E but the keys are stored on the same servers and backups than the comm? if i may quote your website "Tuta has zero access to your mailbox, only the sender and the recipient can read your emails." how by default? if its not PGP and the users handle their keys themselves? login passwords and every thing else that get send to the server is out of control of the user. and can be logged if politics goes full fascist mode, same goes for backups.. just asking out of curiosity? Edit: if you use public/privat key PGP like E2E but generate or even store the keys yourself. How can you possibly have "zero access" to a users mailbox? maybe im dumb and just dont get how this should work? Edit2: sry for beeing picky but if the server has the keys, its the same than 2 TLS clients, encrypted yes but not E2E and not "zero access"
@snornik We explain all of this here: tuta.com/encryption The key is encrypted with your password so that only you have access. We use a quantum-safe hybrid encryption protocol that works similarly to PGP, but not with the same algorithms.
And no, it's not the same as TLS, it's end-to-end encryption with only sender & recipient having access.
sry for the late reply. yeah thats exacly what i meant. if the keys and the passwords (hashed or not) are stored on the server, that not E2E how i understand it. thats maybe a little bit better than whatsapp but definitly not E2E. if german gov (now or in the future) wants to get all your mails. they just need to man in the middle the password. which will be no problem at all. "end-to-end encryption with only sender & recipient having access" yes exactly thats why you should not have/store the keys in the beginning. passwords need to get transmitted. and it would be E2E only if you would have no access to to keys.
Edit: yeah i read this link tuta.com/encryption that was axactly why i wrote this because this is american style peudo E2E promises.
And please: i would like this. but the keys need to stay on the client sides. thats the meaning of END2END.
Data retention is a complex issue, while Germany has some laws on this, email is explicitly exempt due to its nature of offering private communication.
We're monitoring the development and keep fighting for your right to privacy!
canβt stand anything google, so it was an easy change. Thank you for your continued information about moving from US software. While a US citizen, I have moved as much as possible to European software vendors, especially Tutanota.
In March of 2022 Node.js got a new built-in test runner via node:test module. I have evaluated the test runner and made several presentations showing its features and comparing the new built-in test r
Signal on desktop flickers and makes me feel ill, but they won't do anything about it. Workaround is to use a cli flag, but I don't use it from cli? Really want Signal to go mainstream but hard to recommend
Using a supported version? I have searched searched open and closed issues for duplicates. I am using Signal-Desktop as provided by the Signal team, not a 3rd-party package. Overall summary Signal ...
Freedom Scientific has published info on convention specials. For #ACB25: Convention Specials: Visit us in the exhibit hall to take advantage of our summer show specials. Mention discount code JAWS30 to receive the specials listed below. β’ 10% off all Home Annual Licenses and Home Time-Based SMAβs Special pricing is offered to ACB convention registrantsβboth in-person and virtually, valid July 2-31, 2025. Register at the ACB website. Call 1-800-444-4443 to redeem. vispero.com/events/acb-2025/
For #NFB25 Visit us in the exhibit hall to take advantage of our summer show specials. Mention discount code JAWS30 to receive the specials listed below. β’ 10% off all Home Annual Licenses and Home Time-Based SMAβs Special pricing is offered to NFB convention registrantsβboth in-person and virtually, valid July 2-31, 2025. Register at the NFB website. Call 1-800-444-4443 to redeem. vispero.com/events/nfb-2025/
ACB 2025 Convention Activity Schedule Vispero is delighted to be a sponsor and exhibitor at the 2025 ACB National Convention! Weβre looking forward to connecting with you in Dallas, TX! Be sure to check the ACB Convention website for information on rβ¦
Regarding the convention specials from Freedom Scientific, I'm disappointed that home annual licenses are only being discounted at 10% as a convention special; I believe it was 20% in previous years. It's also interesting that we so far haven't seen discounts on any of their hardware, such as video magnifiers and Focus Braille displays.
Given all of the trouble I've had with my Focus display, purchased back in 2020, I'll never get another. Cells kept going out on it to the point of where it's totally useless to me. It is the worse piece of assistive technology I've ever purchased. It was in the shop under warranty as much as I got to get any quality use from the thing. I wouldn't wish my experience on anyone.
Iβm afraid of encountering a Victor Stream III. I bought the Stream II as an impulse buy at #ACB16 and got a lot of use out of it, but itβs been languishing in my drawer for a while. Iβve gotten used to BARD Mobile on my phone. Iβm deathly afraid the Stream III will have some function or other that Iβll believe I suddenly canβt live without, even though Iβve lived without it for almost 61 years.
@Thumper1964 I've used a Victor Trek, which essentiallyy was a Stream 2 with GPS, and I eventually sold it because I just wasn't using it a lot. The Stream 3 doesn't call out to me. While I don't want an Orbit Player, I do think that it will put Orbit Research on the map in the same way that the original Stream did for Humanware. Not that Humanware wasn't already well-known and not that Orbit isn't on "the map", as it's been around for quite some time, but the Orbit Player will give them an even larger customer base and I wouldn't be surprised if it turns out to be their biggest product.
@Thumper1964 If I were going to buy a dedicated book player, it would be a toss-up between the Evo 12 and the Orbit Player. The Evo only plays unprotected content but the majority of what I read lately falls into that category.
@Bruce @Thumper1964 I haven't finished listening to the Tek Talk presentation so there are still things I haven't heard. I do wish that the Stream 3 had Learning Ally support. I still use that service and they never seem to be a priority anymore. If the new Stream supports it, I haven't heard about it.
@Bruce @Thumper1964 When I heard the demo of the Orbit Player over a month ago, it honestly made me think that it was an Orbit Speak minus the Braille keyboard and the ability to write and manage files. Not that there's anything wrong with that but it does make me think of a scaled-down Orbit Speak Plus.
@Thumper1964 @Bruce I signed up with Learning Ally when it was RFB in high school which gives me free membership. I don't use them a lot and their iOS app leaves a lot to be desired but I've found books through them that weren't available through other sources.
@Bruce I havenβt had any dealings with Learning Ally since 2009. I joined them when I was taking some classes at a local community college and thought I could get the books I needed more easily there. Turns out #Bookshare actually served me better and it wasnβt worth the subscription price, canβt remember how much it was now. I grew up with it when it was known as RFB, and while it was great to get the books I needed, good heavens, the narration could be dreadful! I would take AI over that.
Rachael Ava ππ»ββοΈ
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to Rachael Ava ππ»ββοΈ • • •Rachael Ava ππ»ββοΈ
in reply to daniel:// stenberg:// • • •Fair enough. But do consider that if you switch to Codeberg, it does use Forgejo as the backend, so if you need to switch away from Codeberg to a self-hosted Forgejo instance, the build CIs for Forgejo that you would have built on Codeberg should still work, so you wouldn't have to scrap all the build CIs again, you should be able to reuse those again.
(I'm not too familiar with the inner workings on Forgejo, so correct me if I'm wrong)
Of course, that depends on whether you want to migrate cURL to Codeberg. We (as the community) would love to have you on there, but if not, that's okay.
Crunch, I'd even be okay if you set up an official mirror on Codeberg that mirrors the GitHub repo. At least then the root source code isn't nuked if GitHub goes down.
But that's all up to you. I trust that you will do what's in the best interest for the FOSS community.
daniel:// stenberg://
in reply to Rachael Ava ππ»ββοΈ • • •Rachael Ava ππ»ββοΈ
in reply to daniel:// stenberg:// • • •Cassandrich
in reply to Rachael Ava ππ»ββοΈ • • •Jacob Atzen
in reply to Cassandrich • • •daniel:// stenberg://
in reply to Jacob Atzen • • •Louson
in reply to daniel:// stenberg:// • • •@RachaelAva1024
daniel:// stenberg://
in reply to Louson • • •sarna
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to sarna • • •Anton πΊπ¦πͺπΊ
in reply to daniel:// stenberg:// • • •Ben Zanin
in reply to daniel:// stenberg:// • • •β Head Crashing Informatics π€
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to β Head Crashing Informatics π€ • • •β Head Crashing Informatics π€
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to β Head Crashing Informatics π€ • • •β Head Crashing Informatics π€
in reply to daniel:// stenberg:// • • •β Head Crashing Informatics π€
in reply to daniel:// stenberg:// • • •Jaanus Kase
in reply to daniel:// stenberg:// • • •itβs the first time I hear you are considering to move away from GitHub (well, or that some people are saying you should)
Is the reason reputation/political? I would guess it is that, not something technical
daniel:// stenberg://
in reply to Jaanus Kase • • •