in reply to πŸŒˆβ˜”πŸŒ¦οΈπŸ„πŸŒ±πŸ‰

@wmd there are many computer people pretty happy with #deltachat ... who value precisely that they can use it with their families and friends easily, though.

With a lot of alternative software, the complaint is that it is only usable by specialists. We are pretty happy that in our case it is more the specialists who need to work harder and read the FAQ to understand that some lines of traditional thinking about eg email and pgp do not apply delta.chat/en/help

in reply to πŸŒˆβ˜”πŸŒ¦οΈπŸ„πŸŒ±πŸ‰

I don't understand why combining delta with Thunderbird (a client mostly for cleartext mail), or importing some cryptographic key is required to value delta's architectures. Do you hack a different cryptographic key into your signal database, and otherwise don't feel confident to recommend it?
This entry was edited (10 hours ago)
in reply to holga

@hpk I think as mailclients go, thunderbird is one that gets combined most with pgp?
Some people value their trust chains and have very well checked keys, or they want to generate their custom key. Because you can, you get "closer to the metal". Signal doesn't offer it, so it might be a loss or just not considered. That deltachat uses pgp invites people to think im their typical pgo ways/workflows. πŸ€·πŸΌβ€β™€οΈ
in reply to πŸŒˆβ˜”πŸŒ¦οΈπŸ„πŸŒ±πŸ‰

@wmd @hpk one of the biggest problems with pgp has traditionally been the high flexibility in hash algorithms, key types, key structures etc.

modern cryptographic systems like signal don't allow such flexibility, and delta also doesn't delta.chat/en/help#importkey

It's part of the reason why delta pretty persistently is not vulnerable against the many successful attacks against pgp implementations like gpg.

in reply to πŸŒˆβ˜”πŸŒ¦οΈπŸ„πŸŒ±πŸ‰

we are aware of the confusion (it was the whole point of the top level post after all) and doing our best to explain things, and the history of decisions. You seemed to suggest we should make sure to accommodate gpg and Thunderbird users because they are key multipliers, but frankly, we don't think the current state of these tools provides good examples or guidance for secure group messaging ala signal.
This entry was edited (10 hours ago)
in reply to Delta Chat (39c3)

@hpk 1) I was part explaining as hpk said they didn't understand. 2) I don't think you need to facilitate thunderbird+gpg users, just that as deltachat is advertised a lot as being based on mail+pgp, it's good to be aware there is a key audience that can get confused by it.

If you tell me something is based on ssh, but I can't do the usual ssh features/flow I'll also be confused if not frustrated. πŸ€·πŸΌβ€β™€οΈ

in reply to πŸŒˆβ˜”πŸŒ¦οΈπŸ„πŸŒ±πŸ‰

@wmd @hpk we are not advertising mail+pgp in the app, and also not in the web site or app stores of today. It's true that until April 2024 we emphasized mail+pgp more towards users and that's probably the background you remember and argue from. Today, we use email and openpgp for interoperability, and to benefit from a massive ecosystem of software and established understandings and code. But the goal is that users can stay pretty unaware about these underpinnings.
in reply to πŸŒˆβ˜”πŸŒ¦οΈπŸ„πŸŒ±πŸ‰

@wmd @hpk luckily, the vast majority of today's users don't have the historical baggage, and quite a few read our posts and docs of the last 20 months where we repetitively try to convey and clarify what we are doing and why :) it's still going to haunt us, obviously :)

Important talk by @Mer__edith and Udbhav Tiwari on the immediate and serious threat to privacy and data security posed by "Agentic AI" like MS Copilot and similar.

media.ccc.de/v/39c3-ai-agent-a…

#39c3

If you're blind, you can really stick it to the Trump Administration by "hacking" the Epstein files, AKA reading them normally.

forbes.com/sites/daveywinder/2…

So, how was someone able to hack these documents, undoing the redactions that the DOJ of all people had put in place, and reveal the information for all to see? I hope you are sitting down, because it’s going to knock your socks off: β€œI simply highlighted the text, copied it, and pasted it in a document,” Krassenstein said.
This entry was edited (11 hours ago)

At least some common sense. news.slashdot.org/story/25/12/…

miki reshared this.

i turned off altbot for now.

a conversation happened that i need to sit with and that i want others to read and also to consider: ieji.de/@anantagd/115804706509…


I am blind. Seeing people who think I'm not worth the effort fill my timeline with AltBot generated AI stuff that isn't even accurate in lots of cases.

Human alt text is always better, because it doesnΒ΄t focus on ocular seeing. Seeing people think, and AltBot was designed around that notion, that blind people must compensate for missing "eye-seeing", but that's not the case. I am interested in the meaning of an image to you, its maker or publisher.

Again, human alt text is better, also because it strengthens reciprocity between seeing and blind people. AltBot doesn't but it makes seeing people believe they have done their bit for accessibility. In actuality, the reverse is often true.

!!!!!!!!!


in reply to Micr0byte

Honestly this constant back and forth is the only thing I'd think about in this case. I understand if you feel exhausted working on this alone, or if you don't get enough donations or anything. But this tool has helped many, and rather AI description than no description. Some sighted don't bother and that won't change just because, idk, that person thinks they'll feel more guilty when no AI produces the description for them. I'll lose information most of the time. I can still decide whether I want to generate or read the description. But let's say it's just a generic text, or poster, or dashboard, someone just didn't bother describing. Right I could ask them, but would the original poster actually bother adding the alt text afterward? In the least cases. Yeah maybe some nice other sighted person will describe it. But then the difference is not too big anymore, if you get what I mean. Don't let these little comments from all sides get so close to your acting. That's just my take, and I probably don't have a lot room to talk here.
This entry was edited (12 hours ago)

Since the last time I checked, it seems that Keycron has been fully integrated into QMK. They have their own folder and layout files and everything. I want to modify my V1. The problem is that it's been years since I made a new layout in QMK and flashed a keyboard. I don't remember quite how I did it last time, and I've moved to a new laptop since then.

J'ai ouvert le flux du hashtag #BrigitteBardot. Tant de haine, tant de joie de sa mort… Absolument dΓ©goΓ»tant. Oui, c'Γ©tait une femme ayant des propos controversΓ©s (par contre, je suis d'accord avec certains de ses propos quand-mΓͺme), mais c'Γ©tait une icΓ΄ne du cinΓ©ma, une lΓ©gende internationale, une femme avec beaucoup de talent.

politics, leftist anti-communism

Sensitive content

Vous avez entendu les AI bros dire qu'il fallait mettre des datacenters dans l'espace ? Bah c'est une immense connerie. "The short version: this is an absolutely terrible idea, and really makes zero sense whatsoever. There are multiple reasons for this, but they all amount to saying that the kind of electronics needed to make a datacenter work, particularly a datacenter deploying AI capacity in the form of GPUs and TPUs, is exactly the opposite of what works in space." taranis.ie/datacenters-in-spac…

I have disabled every fucking piece of AI bullshit I can find from Firefox and DESPITE THAT today I got ambushed by a new ASK AN AI CHATBOT line in a fucking image context menu

jesus FUCKING CHRIST @mozilla

STOP.

FUCKING.

PUSHING.

THIS.

SHIT.

ON.

US.

(I know the account's abandoned. Don't care. Best I've got. Fucking Mozilla.)

#mozilla #firefox #ai #FuckAI #FuckChatbots

RE: chaos.social/@c3cert/115809417…

This is the kind of place where you can reasonably wonder if someone built/brought an insulin making setup:

#39c3 .ending .. quite an enjoyable blast, and thanks to all the wonderful people just dropping by to say "thank you, it all works very nice for us"! πŸ₯° Certainly raised team spirits :)

This year around, apart from one #chatmail relay setup workshop we didn't do any registered events at congress. Pushing out releases, Illnesses and engagements in various other organizing prevented more public sessions. Next ones will be around #fosdem2026 where also several of us will be around. Cheers!

ArcaneChat reshared this.

If you read the footer of amazon.com with a screenreader, this is what it says:

Β© 1996-2025, Amazon.com, Inc. or its affiliates
Test: amzn-nv-flyout-healthy-choice
Test: nav-rufus-disc-txt
Test: a-truncate-cut
Test: sp-cc-wrapper
Test: .mo-wp
Test: sp-cc
Test: .amzn-box-inner
Test: .js-order-card
Test: pldn-deep-link
Test: add-to-cart-btn
Test: amzn-nav-app-banner-container
Test: .sparkle-container


More money than God and they still can't propperly enclose their containers πŸ˜‚

This entry was edited (16 hours ago)

reshared this

in reply to Pitermach

@pitermach @ondrosik PDFs are also full of such things.

Many people redact PDF content by covering it up with a black or white rectangle, forgetting that, unlike in purely visual formats, that operation does basically nothing in PDF. The content is still there, the renderer is just instructed to draw a white rectangle which occupies the same position and covers it visually.

Sometimes, you can also find sloppy employees leaving notes to other people working on the PDF, especially if the documents are only intended for print, and the electronic version is only given out in special circumstances.

#Catima 2.41.0 is out!

github.com/CatimaLoyalty/Andro…

This release adds support for UTF-8 barcodes (by default, the encoding will be extracted from the pkpass file or auto-detected if set otherwise).

It also contains some bugfixes and UI tweaks.

Due to Google dropping Android 5 compatibility in their libraries, this will be the last release available for Android 5.

Coming soon to an app store near you.

#IzzyOnDroid #FDroid #GitHub #GooglePlay

IzzyOnDroid βœ… reshared this.

in reply to Sylvia

infosec.exchange/@masek/115683…


Dear OSS community on Mastodon,

Every day I scroll through my feed and I see proud announcements like:

β€œFirst Alpha Relase of HyperTurboWidget available"


or

β€œVersion 2.7.1 now with improved glorb handlers!”


or

β€œFlux Capacitor version 4.5 is out”


… and I sit there wondering if I should be excited, terrified, or calling a licensed electrician.

Don’t get me wrong, I love open source. I just have no idea what three quarters of these projects actually do. Are we talking about a web server? A file system? A middleware thingy that keeps the flux from overflowing into the space–time continuum?

So, dear OSS developers of the world: When you announce a new release, please give us (your adoring but slightly confused audience) just a tiny bit of context.

  • Tell us what your software does.
  • Tell us why this release is cool.
  • Tell us what it requires to work.

Example:

We are proud to announce Flux Capacitor version 4.5 is now avalaible. While it creates a nice wormhole to 1955, it requires an underlying gigawatt stack 1.21 to work reliably.


Because nobody wants to cheer enthusiastically for β€œv2.7.1” while secretly Googling β€œwhat is a glorb and why does it need handling”.

Yours truly,

Someone who wants to celebrate your achievements


My personal stance on AI over the past 6 months has slowly shifted from being very strongly opposed to much more of an optimist. I still think that so much of the hype around it is overblown, it's being shoved in all sorts of places it doesn't need to be, etc., but since I started using AI coding agents, my productivity has gone through the roof. Notice too that I didn't say speed, because honestly I think I take longer to ship code now, but productivity. I actually get more done. I spend a while writing out a good prompt, let Claude run for 20-30 minutes while I go get some food and stimulants, then spend a couple/few hours at least tweaking the code, reviewing it, testing it, etc. But I can now just throw out ideas! If I want to quickly try adding oCR to Paperback, I can tell Claude to try it, go eat, then come back, read the code, learn not what to do when I try this later, and git reset. I forgot where I heard this, and I'm paraphrasing, but the quote goes something like: "AI does not create fast experts; it makes experts faster". Can definitely say that's been my experience. A lot of these dumb tiny AI startups will probably die, I hope AI browsers go to the software graveyard, etc., but LLMs are here to stay and honestly I've come around to it. I still get queezy when thinking about what it's doing to the environment, but also, humans are doing plenty of horrible things to the earth right now that I'm not even aware of that are taking out endangered species and eliminating lifeforms that make the chemical we need to survive, so with or without LLMs we're fucked and headed for global warming. That doesn't mean I don't think we should solve the problem, but it's not the only problem either.

Re last: I absolutely love doing accessibility work with Jujutsu. Often I start with an inaccessible base and iterate my way out of the fog--fixing one accessibility issue only reveals another, and another. Git's model makes that tricky--make commits, then individually peel them off onto separate branches when it's time to merge.

With JJ on the other hand, I can stack changes one on top of the other without even thinking about it. Fix accessibility issue, jj new, fix another, jj new. It's usually obvious from jj diff what I fixed, so I can jj edit and jj describe the changes later if I'm just in the zone and don't want to workshop a commit description right now. When it's time to pick apart PRs, jj rebase -s q -s r -s s -s t -d p rebases everything on the most recent upstream change at once, then I just jj edit q and jj bookmark set <branch-name> for each change. A jj git push --allow-new pushes everything at once. When the inevitable PR feedback arrives I just jj edit <bookmark name>, make the changes, and jj git push again. No need to explicitly re-commit since that happens automatically. Then when I want my own private build with all the new a11y goodness, jj new q r s t puts me in a brand new commit with everything merged. Find a new accessibility issue with code I've edited? No problem--just edit the code live on my change, jj absorb, and it merges that code into whichever revision in my history last touched it. If it's at all ambiguous, jj squash merges the changes into an explicit target, and a jj git push updates all the affected PRs without me having to think about it.

Where has this been all my life?

miki reshared this.

Passwords. We all hear β€œmake them strong,” but here’s the real deal: SIZE matters.

A longer password isn’t just better; it’s exponentially harder to crack.

Upgrade your security and better protect your digital identity:

βœ…οΈ Create strong and unique passwords.
βœ…οΈ Store them in a password manager.

Learn more here: tuta.com/blog/minimum-password…

When people say: "billionaires shouldn't exist" that isn't a call to violence. "Being a billionaire" isn't some inherent property in the way that say, skin color is.

Wealth taxation is a perfectly acceptable way of eliminating all billionaires. That doesn't mean billionaires stop being people, they just stop being billionaires.

Mastodon* is in desperate need of a rebrand and a repositioning in the minds of the general public (imo).

There's no reason why a Mastodon address couldn't come with all the cachet of a public library card, or a PBS tote bagβ€”that is to say something that signals β€œI am more than just a content creation machine for a corporation.”

It could be a status symbol for all the right reasons.

*The collective brand, so much as the general public sees Mastodon as such.

MONTAR UNA COMUNIDAD ENERGÉTICA

+ Para instalar autoconsumo colectivo en tejados que no son el tuyo, entre otras posibilidades...

β˜€οΈ ΒΏQuΓ© es eso de una Comunidad EnergΓ©tica?β˜€οΈ

La figura de las comunidades energΓ©ticas son conceptualmente difΓ­ciles porque tienden a explicarse con enrevesados textos legalistas, a pesar de que el concepto es tremendamente sencillo:

πŸ‘‰ Una comunidad energΓ©tica es un tipo de asociaciΓ³n o de cooperativa (gente, comercios e instituciones juntas, pero no grandes empresas) haciendo cosas sobre energΓ­a. Cosas en general.

TΓΊ, tu primo, la dueΓ±a de la fruterΓ­a del bajo del edificio de enfrente y mΓ‘s personas conocidas mΓ‘s podΓ©is juntaros un dΓ­a a tomar un cafΓ©, costituiros como asociaciΓ³n y montar la comunidad energΓ©tica. Lo cierto es que es relativamente fΓ‘cil y hay muchos modelos de estatutos para hacerlo (mΓ‘s adelante pasarΓ© unos cuantos), siempre y cuando tengΓ‘is en cuenta algunas normas bΓ‘sicas como:

1) Las grandes empresas no tienen permiso para ser asociadas o cooperativistas. SΓ­ pueden ser proveedores de servicios o productos, pero mi consejo es que las grandes empresas queden absolutamente fuera de estos sistemas hechos por y para la gente. Si me preguntas a mΓ­, las CE son uno de los mecanismos que existen para debilitar a las grandes empresas.

2) Las personas socias tienen una participaciΓ³n abierta, voluntaria y autΓ³noma. Pueden entrar o salir a voluntad, y tienen voz y voto.

3) La prioridad son los beneficios medioambientales, econΓ³micos y sociales para sus miembros y zona donde opera. No ganancias financieras. Nadie se va a hacer rico con una comunidad energΓ©tica.

Dentro hilo. πŸ‘‡

in reply to Marcos M. 🚲 πŸ‡΅πŸ‡Έ

dime si quieres que cambie algo
muchas gracias!!

lectorrecolector.wordpress.com…

in reply to vic-tor-menta πŸ‡΅πŸ‡ΈπŸ³οΈβ€πŸŒˆπŸ‰

El tΓ­tulo, para joderte la slug jajajajaj

Marcos M. Euklidiadas, porfi, que para algo que tengo distinto... xD

"montar-una-comunidad-energetica-por-marcos-m-euklidiadas/" si puede ser

Luego el tema de los recursos, puedes poner el enlace a cryptpad o bajΓ‘rtelos y resubirlos, lo que quieras.

Pero sin compromiso, vamos, que hagas como te parezca xD

"The mistake that every investor, commentator, analyst and member of the media makes about NVIDIA is believing that its sales are an expression of demand for AI compute, when it’s really more of a statement about the availability of debt from banks and private credit."

-Ed Zitron

wheresyoured.at/the-enshittifi…

In programming, we have a nice pair of opposed acronyms:

β€’ DRY for "Don't Repeat Yourself"
β€’ WET for its opposite, "Write Everything Twice" (or "We Enjoy Typing")

But there's an intermediate position. The benefit of DRY, other than brevity, is that if a thing is specified just once, the specifications can't get out of sync with each other. If you can't manage that, the next best thing is to make sure the compiler or test suite _checks_ that they're in sync. You have to do more typing than you'd like, but at least you've removed the risk of an accident, which is the _most_ important thing.

(For example, in Rust, if you add a new branch to an enum and forget to update one of its match statements, the compiler complains about the one you missed.)

I feel as if there ought to be a nice intermediate acronym for that state of affairs, so you can say "Weeell, it's not as DRY as I'd like, but at least it's only MOIST." Or DAMP, or HUMID or something.

"Match Or Interpreter Spots Trouble"?
"Disallow Almost-Matching Programs"?
"Holler Unless Many Instances Dovetail"?

Not sure about any of those. The last one in particular seems especially "you resorted to a thesaurus, didn't you?".

I've got enough pending accessibility-related PRs on my Godot fork such that the editor is almost pleasant to use. Made the scene tree labeled and usable, fixed tab bar navigation so it wraps and doesn't just dump focus wherever if you mistakenly arrow past a tab border, added regions/landmarks to major editor areas so you know where you are, labeled more unlabeled weirdness.

Going to spend the next week mostly hacking on this before switching back to more "productive" work. It might be about time to start working on making the tilemap and audio editors accessible.

I have this crazy idea that it might actually be easier to rewrite and finish System Fault in Godot than to keep up with the perpetual Bevy churn, along with trying to create pathfinding and other systems entirely from scratch and without seeing the results. Even if I rewrote by hand rather than leaning on gen AI, I can drop bunches of buggy pathfinding/visibility code and just focus on the gameplay itself. I'd often said that System Fault could be done already if I could have used an actual, production-ready game engine to build it. I guess soon we'll see.

And to be clear, none of this is a slam on Bevy which has been great. It's just been a huge lift maintaining bunches of code that does what other engines do out of the box, plus keeping up with the inevitable changes caused by building on third-party libraries to make my life easier, then rebuilding when those libraries go away. Bevy will get there eventually, but not on a timeline that has me finishing this thing anytime soon.

genAI

Sensitive content

in reply to Matt Campbell

genAI

Sensitive content

in reply to Matt Campbell

genAI

Sensitive content

in reply to Matt Campbell

genAI

Sensitive content

in reply to Matt Campbell

genAI

Sensitive content

in reply to Matt Campbell

genAI

Sensitive content

Asking for help! My wife is currently locked out of most digital services due to her phone being broken, and all passwords being in #bitwarden . The bitwarden webapp doesn't help because it asks a verification code, sent on an email which password is.. in bitwarden.
What can we do?

#askfedi #HelpRequest

⇧