RE: infosec.exchange/@WPalant/1156…
Another drama in the FLOSS world! (In history this time.) Forks and insinuations! Who could have guessed.
I almost forgot an upcoming anniversary. 20 years ago I wrote this comment complaining about the state of the AdBlock extension: https://bugzilla.mozilla.org/show_bug.cgi?id=315754#c12.Wladimir Palant (Infosec Exchange)
The other day, I thought yet again about how the formalized government of the USA was officially started because "The Thirteen Colonies" didn't like a nation (England) taxing them from abroad in addition to local taxes...
Yet the US is 1 of 3* countries worldwide that taxes its own citizens who live elsewhere _in addition_ to where they live.
(* The other two countries are the totalitarian dictatorships of Eritrea and North Korea.)
@hub Yeah, sadly. It's a huge burden on all of us who are not filthy rich.
The rich folks can pay people to take care of things for them, including finding loopholes.
The free software movement shaped by GNU/Linux reminds us that control over our digital tools is essential to our freedom. Today, at the heart of this ongoing struggle, Jami embodies this philosophy by offering a genuinely free way to communicate.
Read our article Jami and the GNU/Linux Spirit: jami.net/jami-and-the-gnu-linu…
#Jami #OpenSource #P2P #PrivacyMatters
Legacy Update has significantly expanded its archive of the Microsoft Download Center all the way back to 2012. It now indexes 41,000 downloads, of which over half have been deleted by Microsoft.
More about what went into this, and what we’re still planning to do: patreon.com/posts/expanding-ce…
reshared this
Following some significant Black Friday deals, with the Pixel 10 Pro starting at just $699 as part of Amazon's Cyber Monday offers.Damien Wilde (9to5Google)
It's December 1st, which means that throughout the entire month you should reserve 5-10 minutes every day to read a fantastic article about HTML. ❤️🔥
Check out what's hidden behind the first door.
htmhell.dev/adventcalendar?s=h…
An article, talk, or tool that focuses on HTML every day until Christmas.HTMHell Advent Calendar 2025 - HTMHell
My wonderful financial supporters have decided that my weekly updates of my work on GNOME will partially be public in the future!
Here is my first public weekly update about video thumbnailers, Pika Backup, translations for the GNOME website, and more
blogs.gnome.org/sophieh/2025/1…
Hello world! Last week, I asked the people that financially support me, if I should post my updates publicly. A majority voted to release my future weekly reports to the public, some voted to make...Sophie Herold (Sophie's Blog)
Was surprised to learn that there are apparently no command line tools for poking around the Linux accessibility tree, so I made Acsh, the Accessibility Shell. With Acsh you have both a CLI and REPL, in which you can do things like:
/> ls # Lists all top-level apps
/> cd firefox-1.26 # cd into Firefox, with tab completion. REPL only
/firefox-1.26> cat 0 # Get more information on the first child by index, if you're fine with the possibility that index might change before the command is processed--not likely at this level. Paths are referenced by name or index
/firefox-1.26> watch 0 # Get stream of events for the first child
/firefox-1.26> search -r button ok # Find all OK buttons in this Firefox instance
... # and moreacsh mount. This makes the accessibility tree available as a FUSE mount under ./a11y by default. ./a11y/README.md gives a better overview of the layout, but in brief, directories are apps/accessible objects with their children as subdirectories. Properties are either files containing their raw values or .json files with richer structure. There's an events.json.sock Unix socket in each directory below the root that lets you watch events for an accessible object and all its children, and you can use standard filesystem tooling to search/filter/stream. It's probably slow because there's no caching--it's meant to be a debugging/introspection tool, after all. I'll probably rename this to acfs and drop the CLI/REPL soon--it was great for prototyping and the idea to use FUSE only occurred to me after I realized I was slowly re-inventing all of a filesystem anyway.Thoughts? I'm sure it has bugs, but what doesn't? dev.thewordnerd.info/nolan/acs…
reshared this
cd .. working before I realized that if I made folks too comfortable working in this REPL, they'd probably eventually demand a full embedded BASH shell. :P So yeah, definitely try FUSE. If you need an example of how to do something, ask and I'll work it into the FUSE README.md. I don't want to make it super specific but I do want to make it scriptable and as user-friendly as a FUSE filesystem can possibly be.
Boycotts aren't enough.
A boycott doesn't tell a company that they've pissed you off: it tells a company that you have the option to not consume their products. It's very hard to boycott the electricity company or the water company, because you need their products.
This is why Google and Amazon are who they are. You want to boycott Google products? Good luck living in the modern world. Google have intentionally made themselves too important and ubiquitous to be successfully boycotted. It's not just the tech companies either. If you live in a town which only has one supermarket - and many people do - then you can't realistically boycott them.
We, and by we I mean the masses, are too weak to boycott these companies. Consider that for a moment. Consider the staggering power inequality that this demonstrates. We need stronger weapons.
Using acsh mount with Claude Code and holy shit is it a gamechanger. Mounting my accessibility tree as a filesystem and letting the LLM use tools it is trained on has made identifying accessibility issues so much easier.
I've wanted to play with Godot's AccessKit-based accessibility for a while now but it has enough rough edges to make it just difficult enough to have fun with. I know there are additional accessibility plugins but they're just not enough to make the experience one I want to have
A couple hours in and I've already A) labelled unlabelled controls in the New Project dialog B) turned a status area into an auto-updating live region and C) identified and fixed an off-by-1 bug in single-line text edit fields making them present as blank if the cursor position is at the end. And the only reason it took that long is due to some weird scons cache corruption where the labeling fix required 2 full half-hour builds, which is now fixed. I've also identified several other accessibility issues I plan to work on over the next few days to hopefully create a first-class accessibility experience in the editor and game UIs.
I remain conflicted about the harms generative AI/LLMs cause, because for me they're very much an assistive technology. Could I technically have trawled through all the event logs, widget information, and code to make these changes? Sure. Would I have? Not if I wanted a life outside of fixing accessibility issues. Could someone else have done this. Sure, but where's the overlap between the folks with the time to fix these issues and the lived experience of using a screen reader and finding all the edge cases, like labels speaking twice or text presenting as blank if you happen to be on the last character? Should I stop using it this way because thousands of others use it to generate unsupervised slop? Should I take a bus instead of a plane to travel back home today?
Legitimately not sarcasm, it's just hard to put all of this in perspective sometimes. If I had a spare 30K or so in the couch cushions, I'd buy my own GPU machine and call it an assistive tech expense.
What I'm not at all conflicted about is letting these things run amuck, dumping the slop onto someone else, and passing that off as somehow virtuous because the AI can do no wrong. I've seen it do plenty wrong that I would not leave it unsupervised and uncaged, just as I wouldn't leave my cat unsupervised around a plate of food. Nor would I just dump the results on anyone without taking the time to read them first, and to at least make sure nothing overtly silly is being done in my name. But where most folks can just glance at a window or a screen of logs and fairly easily spot errors or issues, I can ask Claude to take a screenshot or skim logs, and something that would either have been impossible or extremely time-consuming for me is done in under a minute. I don't know what to do about the fact that a bunch of jackasses want to do bad things with that same tech.
If the AI bubble burst tomorrow I'd shed exactly 2 tears and go on with my life. I just wish society's impulse with generative AI/LLMs wasn't to use them for just about every shady thing imaginable such that it's so hard to talk about the ways that they can help without worrying about the can of worms I'll open or the hate I might get. Yes they can be wrong. Yes they can hallucinate. So do humans, but I don't happen to have a helper human in my back pocket every time I need one.
reshared this
Bulgaria is torn by protests in the last month. Core institutions are without electricity. Example - NAP today.
Bulgaria is on the bottom and needs a new political formation as soon as possible!
Right so:
* Mac text processing and spreadsheet accessibility is essentially useless and not getting better.
* I need text processing for work and studies.
* I need Windows for text processing and spreadsheets because, as much as it is not great, at least it isn't Mac
* Parallels is subscription-based and has been getting progressively worse at working efficiently and without turning an M1 Macbook Air into a furnace.
* VMWare Fusion is free, but it took about half an hour to download because I had to realize my VMWare account was not migrated to a Broadcom account, realize that the Broadcom login page does not link to the register page, find the register page, register, verify my email, click on the "DOWNLOAD RIGHT NOW NO SERIOUSLY WE MEAN LIKE ACTUALLY RIGHT THE HELL NOW LIKE THIS INSTANT" buttons again, find the product in the support downloads portal thingy, agree to terms, go through additional screening to download the product which included giving them an address (notice I didn't say my address because apparently "123 My Street, My City, My Province" is valid), press the "HTTPS download" button (this one does not include the word now or all-caps even though it's actually the final boss of the encounter), copy the app into my drive, open the app, agree to terms again and uh... Presumably be able to use it, though I expect additional screening to be required when trying to create a VM. So I'm just slightly miffed on principle.
* Buying a Windows Mini PC seems like a logical option, but it's expensive even at the half-decent lower end and I work on the go like all the time.
I think that's it. I think I'm switching to Linux. Ahahahahahahahahahahahahahha funny joke. Anyway yeah I'm a little disillusioned with the state of things. Tra la la it's almost Christmas let's not get dragged down.
Zach Bennoui reshared this.
UTM?
It's certainly not ideal by any chance and not as polished as Parallels (my friend uses it and she has constant issues with USB device and folder sharing), but it'd probably work for that use case, and you're definitely technically adept enough to understand its quirks.
Also, how are we even sure that it's Parallels getting worse and not just Windows11 getting worse?
I have no information either way, but both seem as plausible to me.
So I want to download VMWare Fusion. So I press the big "DOWNLOAD NOW (opens in new window)" (note the all caps) link on the product page. I get sent to another page explaining the many wonders of Fusion with a big "DOWNLOAD NOW (opens in new window)" link which I press. I'm sent to a log-in page.
Can you imagine being so conscious of the fact that your download process is so insanely convoluted and full of corporate bullshit that you have to all-cap the names of the two links that lead to the very first step of the actual download and make sure they include the word "NOW" so that people don't realize you're leading them onto this field of corporate bullshit?
Jonathan reshared this.
Von »wird schon nichts passieren« zu echter Kontrolle: Mein persönlicher Weg zu mehr IT-Sicherheit, Datenschutz und digitaler Selbstbestimmung. 👇
kuketz-blog.de/it-sicherheit-i…
Bitte teilen! ❤️ ✌️
#sicherheit #security #awareness #datenschutz #dsgvo #prozess #passwortmanager #email #router #android #backup
Learn using BigBlueButton, the trusted open-source web conferencing solution that enables seamless virtual collaboration and online learning experiences.bbb.metalab.at
DMA crackdown for the win! 🙌 #WhatsApp is becoming interoperable in the EU
What does this mean?
✅ WhatsApp users in the EU can message people on other apps
✅ More #freedom for you
✅ Better chances to compete for smaller apps
➡️ Find out more here: tuta.com/blog/whatsapp-interop…
WhatsApp users in Europe will soon have the choice to message users of other services within WhatsApp thanks to the DMA’s crackdown on Big Tech.Tuta
Iniciativa českých rodičů se snaží změnit přístup dětí k mobilům. „Nejde o zákazy, ale o společnou koordinaci rodičů dětí, které ještě telefon používat nezačaly,“ vysvětlují autoři. Několik rodičů Deníku N popsalo důvody, proč tento záměr podporují.Iva Bezděková (Deník N)
Android provides a standard hardware attestation API with support for arbitrary roots of trust and alternate operating systems. This provides a higher level of security than the Play Integrity API....thestinger (GitHub)
Tohle je třeba v Bank ID. Zjednodušeně - uživatel se pomocí Bank ID přihlašuje to nějakého systému. Bank ID vrací unikátní a stabilní identifikátor uživatele pro ten systém. Jiný systém dostane jiný identifikátor.
Problém by to byl u systémů ala Mastodon. Každá instance by měla jiný identifikátor pro stejného uživatele takže by se daly zakládat účty na jednu občanku na různých instancích.
Wie versprochen der Blogbeitrag über mein neues #Homelab "Konzept".
teqqy.de/selfhosted-setup-2025…
#selfhosted #komodo #gitops @homelab_de
Mein Homelab-Rebuild 2025 – weg von Kubernetes, hin zu GitOps auf Proxmox: Komodo, Gitea, Renovate und ein schlanker VM-Stack für zuverlässiges Selfhosting.teqqy.de
over the weekend we did:
hackerone_count += 2;
Now at 142 submissions this year so far for #curl. Out of which 8 were confirmed actual vulnerabilities.
El marcado HTML incorrecto es una de las fuentes más habituales de barreras de accesibilidad. Georgiana Frincu comparte ejemplos reales de qué ocurre cuando la semántica falla y cómo solucionarlo de forma eficiente.
#a11yConf2025 #a11y #a11yConf #accesibilidad
Todos creemos saber cómo funciona nuestra web… hasta que la probamos como lo haría una persona que usa tecnologías de asistencia. En este taller en la sala Next Digital, Núria Azanza y Karina Ramírez guian pruebas reales para que escuches lo que “dice” tu pantalla.
#a11yConf2025 #a11y #a11yConf #accesibilidad
La visualización de datos puede generar barreras si no se piensa en todas las personas. Carmen Torrecillas explica cómo estructurar, describir y representar datos para que también sean comprensibles para quienes usan tecnologías de asistencia.
#a11yConf2025 #a11y #a11yConf #accesibilidad
ARIA es potente, pero solo si se usa bien. Mia Salazar revisa casos en los que los atributos ayudan, en los que generan problemas y cómo encontrar el equilibrio entre semántica, estructura y accesibilidad.
#a11yConf2025 #a11y #a11yConf #accesibilidad
The Winter Sale has officially started! ❄️
Enjoy 50% off Cryptomator and protect your files with secure, zero-knowledge encryption. Want to know how long the sale runs and what’s included? All details are in our newest blog post 👇
cryptomator.org/blog/2025/12/0…
#WinterSale #CyberSecurity #DataProtection #Encryption #EncryptedCloud #SecureYourData #SecureCloudStorage #ZeroKnowledge
Get 50% off Cryptomator this December, learn more about the upcoming price change in 2026, and continue benefiting from our fair one-time purchase model.Cryptomator
✨ Der netcup Adventskalender ist da! 🎁🏷️
Am heutigen Cyber Monday trifft Weihnachtszauber auf eiskalte Deals!
Entdecke jeden Tag neue Überraschungen im Adventskalender.
Schnapp dir den Inhalt von Türchen 1 bis Dienstag, 02.12., 8 Uhr MEZ! 👉
I didn't realize that Swiss trains apparently also adhere to the "schedule for 80% of capacity rule".
Apparently trains in Switzerland go around 80% of the top speed possible on the track. The 20% overhead is used to make up time in the case of delays.
The thinking is: stable and predictable operation is more important than going faster. Because the cost of passengers regularly missing layovers is much higher than the benefits of trains being 20% faster.
@miki this scenario rarely happens on Swiss rail. The manjority of routes are "monotonic", that is, a train ahead in schedule will also be ahead In arrival time. This is due to at least three factors:
There are scenarios where it happens, those are when regional trains interact with intercity trains. In that case, a track change is made to allow the intercity trains to pass a regional train at a station, but those cases are the other way around: the regional train is delayed such that the intercity unexpectedly caught up.
What's key here is that it's not necessarily a product of infrastructure and more a result of careful planing and inter-operator cooperation.
CLI tool to provide a per-language breakdown of a folder of sourcecode, optionally respecting things like gitignores, hidden files, and symlinks. - Release 0.4.0 · trypsynth/codestatsGitHub
What I'm looking for in an utility like this is some kind of directory breakdown to see where the `meat` of the code really is, perhaps filtered by language.
Something like:
du -hd3 | sort -rh
But for LoC instead of file sizes.
I haven't found anything that has this feature.
It's December first, and you know what that means:
Show off your advent calendars if you have them! 😊
Mine is shared by the family, with different surprises for everyone. For me there are tarot cards that I traded with other people. They were blind trades so I have no idea what's in store!
I quite like the first one 😊
#advent #AdventCalendar #tarot #MagpieTarot
38.3 Fieber olé. Wenn ich huste fliegen Vögel auf und Eichhörnchen fallen vom Baum.
Na dann mal frohen ersten Advent!
Take mario party, Pokemon, and some other classic games, and you get Crazy Party.Download the game here: https://lerven.me/cpGet these videos before everyone...YouTube
reshared this
Hubert Figuière
in reply to Tor Lillqvist • • •the funny part is the company behind AdBlock Plus ended up buying the one behind AdBlock.
(yes they both became for profit)